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Independent Orbiter Assessment 
Assessment of the Guidance, Navigation, and 
Control System FMEA/CIL 


1.0 EXECUTIVE SUMMARY 

The McDonnell Douglas Astronautics Company (MDAC) was selected in 
June 1986 to perform an Independent Orbiter Assessment (IOA) of 
the Failure Modes and Effects Analysis (FMEA) and Critical Items 
List (CIL) . Direction was given by the STS Orbiter and GFE 
Projects Office to perform the hardware analysis using the 
instructions and ground rules defined in NSTS 22206. — Instruction s 
for Preparation of FMEA and C IL. 10 October 19M- 

The IOA effort first completed an analysis of the Guidance, 
Navigation, and Control System (GNC) hardware, generating draft 
failure modes and potential critical items. To preserve 
independence, this analysis was accomplished without reliance 
upon the results contained within the NASA FMEA/CIL documentation. 
The IOA results were then compared to the NASA FMEA/CIL baseline 
with proposed Post 51-L updates included. A resolution of each 
discrepancy from the comparison is provided through additional 
analysis as required. This report documents the results of that 
comparison for the Orbiter GNC hardware. 

The IOA product for the GNC analysis consisted of one-hundred 
forty-one (141) failure mode "worksheets" that resulted in 
twenty-four (24) potential critical items being identified. 
Comparison was made to the NASA baseline (as of 4 January 1988) 
which consisted of one— hundred forty— eight (148) FMEAs and 
thirty-six (36) CIL items. The comparison determined if there 
were any results which had been found by the IOA but were not in 
the NASA baseline. This comparison produced agreement on all but 
fifty-six (56) FMEAs which caused differences in zero (0) CIL 
items. Reference Figure 1. 

The issues arose due to different In terpretation of NSTS 22206^. 
yMRA/CTL preparation instructions . IOA analyzed the components 
of the electrical circuits, generating fifty-six (56) worksheets 
more than NASA, who treated the electrical circuits as black 
boxes. Of these fifty-six (56) differences with the FMEA's, all 
were minor and did not affect criticalities assessments. In 
conclusion, IOA is in full agreement with the revised NASA CIL 
baseline. 
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2 . 0 INTRODUCTION 


2 . 1 Purpose 

The 51-L Challenger accident prompted the NASA to readdress 
safety policies, concepts, and rationale being used in the 
National Space Transportation System (NSTS) . The NSTS Office has 
undertaken the task of reevaluating the FMEA/CIL for the Space 
Shuttle design. The MDAC is providing an independent assessment 
of the proposed Post 51-L Orbiter FMEA/CIL for completeness and 
technical accuracy. 

2.2 Scope 

The scope of the independent FMEA/CIL assessment activity 
encompasses those Shuttle Orbiter subsystems and GFE hardware 
identified in the Space Shuttle Independent FMEA/CIL Assessment 
Contractor Statement of Work. Each subsystem analysis addresses 
hardware, functions, internal and external interfaces, and 
operational requirements for all mission phases. 

2 . 3 Analysis Approach 

The independent analysis approach is a top-down analysis 
utilizing as-built drawings to breakdown the respective subsystem 
into components and low-level hardware items. Each hardware item 
is evaluated for failure mode, effects, and criticality. These 
data are documented in the respective subsystem analysis report, 
and are used to assess the proposed Post 51-L NASA and Prime 
Contractor FMEA/CIL. The IOA analysis approach is summarized in 
the following Steps 1.0 through 3.0. Step 4.0 summarizes the 
assessment of the NASA and Prime Contractor FMEA/CIL which is 
documented in this report. 

Step 1.0 Subsystem Familiarization 

1.1 Define subsystem functions 

1.2 Define subsystem components 

1.3 Define subsystem specific ground rules and 
assumptions 

Step 2.0 Define subsystem analysis diagram 

2.1 Define subsystem 

2.2 Define major assemblies 

2 . 3 Develop detailed subsystem representations 

Step 3.0 Failure events definition 

3 . 1 Construct matrix of failure modes 

3.2 Document IOA analysis results 
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Step 4 . 0 Compare IOA analysis data to NASA FMEA/CIL 

4.1 Resolve differences 

4 . 2 Review in-house 

4 . 3 Document assessment issues 

4.4 Forward findings to Project Manager 

2.4 Ground Rules and Assumptions 

The GNC ground rules and assumptions used in the IOA are defined in 
Appendix B. 
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3 . 0 SUBSYSTEM DESCRIPTION 


3.1 Design and Function 

The function of the GNC hardware is to respond to guidance, 
navigation, and control software commands to effect vehicle 
control and to provide sensor and controller data to GNC 
software . 

The functions of the GNC software can be divided into flight 
control, guidance, navigation, hardware data processing, and crew 
display. The specific tasks of each function, as well as the GNC 
hardware used to support them, vary with mission phase. 

Figure 2 is an overview of the GNC hardware for which failure 
modes analysis was performed. For the analysis, the hardware was 
divided into the following three categories: 

I. MAJOR COMPONENTS (BLACK BOXES) - This category includes 
the sensors, manual controllers, and effector interfaces 
listed below: 


(1) 

RHC 

(8) 

ADTA 

(2) 

THC 

(9) 

RGA (ORB) 

(3) 

RPTA 

(10) 

RGA (SRB) 

(4) 

SBTC 

(11) 

AA 

(5) 

IMU 

(12) 

ASA 

(6) 

ST 

(13) 

RJD 

(7) 

COAS 

(14) 

ATVC 

Figures 3-16 

provide 

a hardware 

breakdown of each of the 


above components. 

FUNCTION SWITCHES AND CIRCUITS - This category consists of 
switches/circuits whose primary purpose is to select a 
particular mode of operation for the GNC software. Twelve 
groups were identified and are listed below: 


(1) TRIM ENABLE INHIBIT SW'S 

(2) TRIM SW'S 

(3) TRIM ON/OFF SW'S 

(4) SENSE -Z/-X SW 

(5) P,R/Y CSS/ AUTO PBI'S 

(6) SPD BK/THROT PBI'S 

(7) BODY FLAP CNTL CKT 


(8) ATT REF PBI 

(9) ENTRY MODE SW CKT 

(10) ABORT MODE CKT 

(11) DAP PBI'S 

(12) FCS CHNL CNTL CKT 
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III. POWER SWITCHES AND CIRCUITS - This category consists of 

groups of switches/circuits that provide electrical power 
to the major components and Flight Control System (FCS) 
annunciation lamps. Thirteen groups were identified and are 
listed below: 


(1) 

FLT CNTLR PWR 

CKT 

(8) 

RGA (SRB) PWR CKT 

(2) 

IMU PWR CKT 


(9) 

AA PWR CKT 

(3) 

ST PWR CKT 


(10) 

ASA PWR CKT 

(4) 

ST DOOR PWR CKT 

(ID 

RJD PWR CKT 

(5) 

COAS PWR CKT 


(12) 

ATVC PWR CKT 

(6) 

(7) 

ADTA PWR CKT 
RGA (ORB) PWR 

CKT 

(13) 

FCS SW ANNUN CKT 


A brief description of the major components and function switches 
and circuits is provided below. 

1. Three RHC's, two forward and one aft, provide manual 
attitude control. 

2. Two THC's, one at the CDR's station and one aft, provide 
manual translation control with the use of the RCS system. 

3. Two RPTA's, one connected to the CDR's pedals and one to 
the PLT's, send rudder and nose wheel steering commands to 
the GPCs. 

4. Two SBTCs , one at the CDRs station and one at the PLTs, 
control the speedbrake during entry. The pilot's SBTC can 
also be used for main engine throttle control during 
ascent. 

5. Three IMU's, attached to the NAV base, provide acceleration 
and attitude data to the GPC's. 

6. Two ST's, mounted on the NAV base, are used to align the 
IMU's and to provide line of site vectors during rendezvous 
missions. 

7. One COAS that can be mounted at the CDR's station or the 
aft station is a backup to the ST's for use in IMU 
alignment. 

8. Four ADTA's, located in the forward avionics bay, provides 
pressure data to the GPC's. this data is used during entry 
to calculate angle of attack, relative speed, mach number, 
and barometric altitude. 

9. Four orbiter RGA's, mounted at the bottom of the aft 
bulkhead, provide attitude rates about each body axis to 
flight control for stability augmentation during ascent and 
entry. The RGA's also drive the rate needles of the ADI 1 s 
during ascent. 
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Four SRB RGA's, two on the left and two on the right SRB, 
provide pitch and yaw rates to flight control to assist in 
SRB TVC and to provide stability augmentation during ascent 
until SRB separation. 

11. Four AA's, located in the forward avionics bays, measure 
normal and lateral body acceleration for use in flight 
control to provide stability augmentation during ascent and 
entry. 

12. Four ASA's, located in the aft avionics bays, derive 
aerosurface actuator position error commands and perform 
fault detection. 

13. Four RJD's, two forward and two aft, in response to flight 
control commands, send signals to open/close the oxidizer 
and fuel valves associated with each RCS jet. 

14. Four ATVC's, located in the aft avionics bays, provide SRB 
and main engine gimbal control for slewing engine bells 
prior to liftoff, gimbaling engines to control trajectory 
during flight, positioning the main engines to a dump 
position, and stow position. 

15. Two TRIM ENABLE/ INHIBIT switches, CDR's and PLT's, allow 
the software to accept or reject trim commands from the 
panel trim switches and the RHC trim switches. 

16. Six TRIM switches, a roll, pitch, yaw set at the CDR's and 

PLT | s station, allow the crew to make small changes in the 

vehicles attitude via commands to the aerosur faces . 

17. Two panel TRIM ON/OFF switches, CDR's and PLT's, provide 
power to the associated TRIM switches when in the "ON" 
position. 

18. One SENSE -Z/-X switch located on the aft panel A6, is used 

onorbit to make the aft RHC, THC, and ADI correspond to the 

operator's line of sight. 

19. Two sets of PITCH, ROLL/YAW CSS/AUTO PBI's exist (eight 
switches total) that allow the CDR or PLT to select auto or 
manual (CSS) attitude control during ascent and entry. 

20. Two SPD BK/THROT PBI's, CDR's and PLT's station, allow the 
crew to switch to auto from manual throttle control during 
ascent and to auto or manual speed brake control during 
entry. 

21. The BODY FLAP CONTROL CIRCUIT consists of two BODY FLAP 
UP/DOWN switches and two BODY FLAP AUTO/MANUAL PBI's that 
allow manual or auto control from either the CDR's or PLT's 
station. 
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Three ATT REF PBI's, located at the CDR's, PLT's, and aft 
crew stations, allow the crew to select a reference frame 
from which attitude errors will be displayed on the three 
Attitude Direction Indicators (ADI) . The ATT REF PBI is 
also used to take "marks” when the COAS is used for IMU 
alignment. 

23. The ENTRY MODE SWITCH CIRCUIT provides capability for the 
crew to change DAP control modes during entry via the ENTRY 
MODE switch. 

24. The ABORT MODE SWITCH CIRCUIT provides capability for the 
crew to select and initiate an abort mode during ascent via 
the ABORT MODE ROTARY switch and the ABORT push button. 

25. Forty eight DAP PBI's (24 fwd and 24 aft) provide crew 
flexibility in selecting translational and rotational 
control options with the ONORBIT and TRANS DAPS . 

26. Four FCS CHANNEL CONTROL CIRCUITS provide power and control 
to one of four ASA's and ATVC's via the four FCS CHANNEL 
OVERRIDE/AUTO/OFF switches on panel C3. 

3.2 Interfaces and Locations 

The GNC hardware is located throughout the orbiter. The precise 
location for each component/switch/circuit was provided on the 
analysis worksheets in Working Paper No. 1.0-WP-VA86001-16. 

The GNC hardware is interfaced with the software via the flight 
critical MDM's. Switch and power status is monitored via the 
flight critical MDM's and operational instrumentation. 

3 . 3 Hierarchy 

Figure 2 illustrates the breakdown of the GNC into it's hardware 
components, and Figures 3 through 16 are the detailed systems 
representations . 
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GNC SUBSYSTEM OVERVIEW 
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GNC TRANSLATIONAL HAND CONTROLLER 



Pigur® 4 - GNC TRANSLATIONAL HAND CONTROLLER (THC) 
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GNC SPEED BRAKE/THRUST CONTROLLER 













GNC INERTIAL MEASUREMENT UNIT 
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GNC STAR TRACKER ASSEMBLY 
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GNC CREW OPTICAL ALIGNMENT SITE 
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GNC AIR DATA TRANSDUCER ASSEMBLY 
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TRANSDUCER 








GNC ORBITER RATE GYRO ASSEMBLY 



Figure 11 - GNC ORBITER RATE GYRO ASSEMBLY (ORGA) 
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GNC SOLID ROCKET BOOSTER RATE GYRO ASSEMBLY 
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GNC ACCELEROMETER ASSEMBLY 
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GNC AEROSURFACE SERVO AMPLIFIER 
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GNC REACTION JET DRIVER 



Figure 15 - GNC REACTION JET DRIVER (RJD) 
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GNC ASCENT THRUST VECTOR CONTROL 
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4.0 ASSESSMENT RESULTS 

The XOA analysis of the GNC hardware initially generated one - 
hundred forty-one (141) failure mode worksheets and identified 
twenty-four (24) Potential Critical Items (PCIs) before starting 
the assessment process. In order to facilitate comparison, 
thirty-four (34) additional failure mode analysis worksheets were 
generated. These analysis results were compared to the proposed 
NASA Post 51-L baseline of one-hundred forty-eight (148) FMEAs 
and thirty-six (36) CIL items, which were generated using the 
NSTS-22206 FMEA/CIL instructions. Upon completion of the 
assessment, one— hundred forty— three (143) of the one— hundred ^ 

forty-eight (148) FMEAs were in agreement. Of the five (5) that 
remained, two (2) had minor discrepancies that did not affect 
criticality. Of the remaining three (3), the issues were with 
FMEAs 05-1-SRB-2 , 05-60-6N0804-1 , 2. In summary, no drawings 
were available to assess the above EPD&C FMEAs. 

The GNC assessment was divided into the following three 
categories : 

I. MAJOR COMPONENTS (BLACK BOXES) 

II. FUNCTION SWITCHES AND CIRCUITS - primary purpose is to 
select a particular mode of operation for the GNC software. 

III. POWER SWITCHES AND CIRCUITS - these provide electrical power 
to the GNC major components and DAP annunciation lamps. 

A summary of the quantity of NASA FMEAs assessed, versus the 
recommended IOA baseline, and any issues identified is presented 
in Table I. 


+ — 
1 

Table I 

Summary of 

IOA 
■ "* 1 

FMEA 

Assessment 

+ 

Component 

1 

NASA 

1 

IOA 

| 

Issues 

r 

ALL 

1 

+ — 

148 

1 

+ — 

175 


56 


A summary of the quantity of NASA CIL items assessed, versus the 
recommended IOA baseline, and any issues identified is presented 
in Table II. 


+ 

1 

Table II 

Summary of 

IOA 

CIL 

Assessment 

+ 

1 

+ 

H — — 

Component 

1 

NASA 

1 

-+ ™ 

IOA 

| 

Issues 

1 

h 

r 
+ — 

ALL 

J- 

36 

1 

-+ 

36 


0 

1 

+ 


25 


Table III presents a summary of the IOA recommended failure 
criticalities for the GNC subsystem for the Post 51-L FMEA 
baseline. 


Table III Summary of IOA Recommended Failure Criticalities 


Criticality: 

1/1 

2/1R 

2/2 

3/1R 

3/2R 

3/3 

TOTAL 

Number : 

8 

16 

11 

86 

22 

32 

175 


Table IV presents a summary of the IOA recommended CIL items for 
the GNC subsystem for the Post 51-L baseline. 


Table IV Summary of IOA Recommended Critical Items 


Criticality: 

1/1 

2/1R 

2/2 

3/1R 

3/2R 

3/3 

TOTAL 

Number : 

8 

16 

11 

2 

0 

0 

36 


Appendix C presents the detailed assessment worksheets for each 
failure mode identified and assessed. 

Appendix D highlights the NASA Critical Items and correspondina 
IOA worksheet ID. 

Appendix E contains new IOA analysis worksheets that cover 
failure modes that were not included in the original analysis. 
These worksheets were added in order to make a comparison with 
the NASA FMEAs on these failure modes. 

Appendix F provides a cross reference between the NASA FMEA and 
corresponding IOA worksheet (s) . IOA recommendations are also 
summarized. 
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The scheme for assigning IOA assessment (Appendix C) and analysis 
(Appendix E) worksheet numbers is shown in Table V. 


+ — 
1 

Table V 

IOA Worksheet Numbers 

+ 

1 

H 

1 

+ 

Component 

| IOA ID Number 

1 

+ 


1. RHC 

GNC-101 to 105 

2. FLT CNTLR PWR CRT 

GNC-110 to 111 

3. TRIM ENABLE INHIBIT SW'S 

GNC-120 to 121 

4 . TRIM SW ' S 

GNC- 130 to 131 

5. TRIM ON/OFF SW'S 

GNC— 140 to 141 

6. SENSE -Z/-X SW 

GNC-150 to 151 

7. P,R/Y CSS/ AUTO PBI ' S 

GNC-160 to 161 

8. THC 

GNC-201 to 203 

9. RPTA 

GNC-301 to 304 

10 SBTC 

GNC-401 to 406 

11 SPD BK/THROT PBI 

GNC-410 to 411 

12 IMU 

GNC-501 to 502 

13 IMU PWR CRT 

GNC-510 to 512 

14 ST 

GNC-601 to 604 

15 ST PWR CRT 

GNC-610 to 612 

16. COAS 

GNC-701 to 703 

17. COAS PWR CRT 

GNC-710 to 712 

18 . ADTA 

GNC-801 to 802 

19. ADTA PWR CRT 

GNC-810 to 812 

20. RGA (ORB) 

GNC-901 to 902 

21. RGA (ORB) PWR CRT 

GNC-903 to 905 

22. RGA (SRB) 

GNC-950 to 951 

23. RGA (SRB) PWR CRT 

GNC-960 to 961 

24. AA 

GNC-1001 to 1002 

25. AA PWR CRT 

GNC-1010 to 1014 

26. ASA 

GNC-1101 to 1108 

27. FCS CHNL CNTL CRT 

GNC-1110 to 1112 

28. ASA PWR CRT 

GNC-1130 to 1131 

29. RJD 

GNC- 12 01 to 1208 

30. RJD PWR CRT 

GNC-1211 to 1214 

31. ATVC 

GNC-1301 to 1305 

32. ATVC PWR CRT 

GNC-1310 to 1311 

33. BODY FLAP CNTL CRT 

GNC-1400 to 1404 

34. DAP PBI'S 

GNC-1501 to 1586 

35. FCS SW ANNUN CRT 

GNC-1590 to 1593 

36. ENTRY MODE SW 

GNC-1601 to 1602 

37. ABORT MODE CRT 

GNC- 18 01 to 1804 

38. ATT REF PB 

GNC-1901 to 1902 

39. MEASUREMENT ISO RESISTORS 

GNC-1950 


+ 


The three GNC categories are discussed in the following sections 
along with issues, and the IOA recommendation for the Post 51-L 
FMEA/CIL. 


27 



4.1 ASSESSMENT RESULTS - GNC MAJOR COMPONENTS 


Fourteen components were included in this category. A summary of 
the quantity of NASA FMEAs assessed for the GNC major components, 
versus the recommended baseline, and any issues identified is 
presented in Table VI. 

_t — f - 

Table VI GNC Major Components 

Summary of IOA FMEA Assessment 


| Component 

h H 

| NASA 

| IOA 

L 

| Issues 

L 

1. RHC 

3 

5 

2 

2. THC 

3 

3 

0 

3. RPTA 

3 

4 

1 

4 . SBTC 

4 

6 

2 

5. IMU 

2 

2 

0 

6. ST 

4 

5 

1 

7 . COAS 

2 

3 

1 

8 . ADTA 

2 

2 

0 

9. RGA (ORB) 

2 

2 

0 

10. RGA (SRB) 

2 

2 

0 

11. AA 

2 

6 

4 

12. ASA 

2 

2 

0 

13. RJD 

4 

6 

2 

14. ATVC 

2 

4 

2 

T “ 

| TOTAL | 

+ H 

37 | 

H 

52 | 

15 


The issues resulted from IOA analyzing failure modes not covered 
by NASA. These failures did not raise the criticality of the 
component. NASA should consider generating FMEA's for 
completeness . 
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A s umm ary of the quantity of NASA CIL items assessed for the GNC 
major components, versus the recommended IOA baseline, and any 
issues identified is presented in Table VII. 




Table VII GNC Major Components 

Summary of IOA CIL Assessment 

+ h t* + - 

| Component | NASA | IOA | Issues | 

+ + + + + 


1. 

RHC 

1 

1 

0 

2. 

THC 

1 

1 

0 

3. 

RPTA 

1 

1 

0 

4. 

SBTC 

2 

2 

0 

5. 

IMU 

2 

2 

0 

6. 

ST 

0 

0 

0 

7. 

COAS 

0 

0 

0 

8. 

ADTA 

0 

0 

0 

9. 

RGA (ORB) 

1 

1 

0 

10. 

RGA (SRB) 

1 

1 

0 

11. 

AA 

1 

1 

0 

12. 

ASA 

1 

1 

0 

13. 

RJD 

3 

3 

0 

14. 

ATVC 

1 

1 

0 


+ + + + + 


| TOTAL | 15 | 15 | 0 | 

+ + + + + 
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Table VIII presents a summary of the IOA recommended failure 
criticalities for the GNC major components for the Post 51-L FMEA 
baseline. 





TABLE VIII GNC Major Components 

Summary of IOA Recommended Failure Criticalities 

Criticality: 

1/1 

2/1R 

2/2 

3/1R 

3/2R 

3/3 

TOTAL 

1. RHC 

1 


- 

2 

- 

2 

5 

2. THC 

- 

1 

- 

2 

- 

- 

3 

3. RPTA 

1 

- 

- 

3 

- 

- 

4 

4. SBTC 

- 

2 

- 

4 



6 

5. I MU 

- 

1 

- 

i 

- 

- 

2 

6. ST 

- 

- 

- 

5 

• 


5 

7 . COAS 

- 

- 

- 

3 

- 

- 

3 

8 . ADTA 

- 

- 

- 

2 

- 

- 

2 

9. RGA (ORB) 

- 

1 


1 

- 

- 

2 

10. RGA (SRB) 

- 

1 

- 

1 

- 

- 

2 

11. AA 

- 

1 

- 

1 

- 

- 

2 

12. ASA 

- 

1 

- 

5 

- 


6 

13. RJD 

2 

1 

- 

3 

- 

- 

6 

14. ATVC 


1 

- 

3 

- 

- 

4 

TOTAL 

4 

10 

0 

36 

0 

2 

52 






Table IX presents a summary of the IOA recommended CIL items for 
the GNC major components for the Post 51-L baseline. 




TABLE IX GNC Major Components 

Summary of IOA Recommended Critical Items 


Criticality: 

1/1 

2/1R 

2/2 

3/1R 

3/2R 

3/3 

TOTAL 

1. 

RHC 

1 

- 

- 


- 


1 

2. 

THC 

- 

1 

- 

- 

- 


1 

3. 

RPTA 

1 

- 

- 

- 

- 

- 

1 

4. 

SBTC 


2 

- 

- 

- 

- 

2 

5. 

IMU 

- 

1 

- 

1 


- 

2 

6. 

ST 

- 

- 

- 

- 


- 

- 

7. 

COAS 

- 

- 

- 

- 

- 


- 

8. 

ADTA 

- 

- 

- 

- 

- 

- 

- 

9. 

RGA (ORB) 

- 

1 

- 

- 

- 

- 

1 

10. 

RGA (SRB) 

- 

1 

- 

- 

- 


1 

11. 

AA 

- 

1 


- 


- 

1 

12. 

ASA 


1 

- 


- 

- 

1 

13. 

RJD 

2 

1 

- 

- 

- 

- 

3 

14. 

ATVC 

- 

1 

- 


- 


1 

TOTAL 

4 

10 

0 

1 

0 

0 

15 

H 
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4.2 ASSESSMENT RESULTS - GNC FUNCTION SWITCHES AND CIRCUITS 

Twelve groups of switches and circuits make up this category. A 
summary of the quantity of NASA FMEAs assessed for the GNC 
function switches and circuits, versus the recommended baseline, 
and any issues identified is presented in Table X. 


H — h 

| Table X GNC Function Switches and Circuits I 


Summary of IOA FMEA Assessment 






“ — f — — 


+ 


Component 

1 

+ — 

NASA 


IOA 


Issues 


1. TRIM ENABLE 
INHIB SW'S 

1 

2 

1 

2. TRIM SW'S 

3 

6 

3 

3. TRIM ON/OFF 
SW'S 

1 

2 

1 

4. SENSE -Z/-X 
SW 

1 

2 

1 

5. P,R/Y CSS/ 
AUTO PBI'S 

8 

12 

4 

6. SPD BK/THROT 
PBI 

2 

3 

1 

7. BODY FLAP 
CNTL CKT 

3 

6 

3 

8. ATT REF PBI 

0 

2 

2 

9. ENTRY MODE 
SW 

1 

2 

1 

10. ABORT MODE 
CKT 

5 

8 

3 

11. DAP PBI'S 

34 

33 

1 

12. FCS CHNL 
CNTL CKT 

5 

5 

0 

TOTAL 

64 

83 

21 


The issues resulted from IOA analyzing failure modes not covered 
by NASA. These failures did not raise the criticality of the 
component. NASA should consider generating FMEA's for 
completeness. The DAP PBI's issues are the results of the 
wording in the effects field. 
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A summary of the quantity of NASA CIL items assessed for the GNC 
function switches and circuits, versus the recommended IOA 
baseline, and any issues identified is presented m Table XI. 


Table XI 


GNC Function Switches and Circuits 
Summary of IOA CIL Assessment 


| Component | 



I 1 . TRIM ENABLE 
INHIB SW'S 


NASA 


Issues 


2. TRIM SW'S 

3. TRIM ON/OFF 
SW'S 

4. SENSE -Z/-X 
SW 

5. P,R/Y CSS/ 
AUTO PBI'S 

6. SPD BK/THROT 
PBI 

7. BODY FLAP 
CNTL CRT 

8. ATT REF PBI 

9. ENTRY MODE 
SW 

10. ABORT MODE 
CKT 

11. DAP PBI'S 

12. FCS CHNL 
CNTL CKT 


TOTAL 


33 


Table XII presents a summary of the IOA recommended failure 
cri t-i ca lities for the GNC function switches and circuits for the 
Post 51-L FMEA baseline. 




TABLE XII GNC Function Switches and Circuits 

Summary of IOA Recommended Failure Criticalities 


Criticality: 

1/1 

2/1R 

2/2 

3/1R 

3/2R 

3/3 

TOTAL 

1. TRIM ENABLE 
INHIB SW'S 

- 

- 


- 

- 

2 

2 

2. TRIM SW'S 


- 

- 

- 

- 

6 

6 

3. TRIM ON/OFF 
SW'S 

- 

- 

- 

- 

- 

2 

2 

4. SENSE -Z/-X 
SW 

- 

- 

- 

- 

- 

2 

2 

5. R, P/Y CSS/ 
AUTO PBI'S 

2 

- 

- 

10 

- 

- 

12 

6. SPD BK/THROT 
PBI 


- 

- 

- 

- 

3 

3 

7. BODY FLAP 
CNTL CRT 

- 

- 

- 

6 


- 

6 

8. ATT REF PBI 

- 

- 

- 

2 

- 

— 

2 

9. ENTRY MODE 
SW 

- 

- 

- 

- 

- 

2 

2 

10. ABORT MODE 
CKT 

1 

2 

- 

5 

- 

- 

8 

11. DAP PBI'S 

- 

- 

10 

- 

22 

1 

33 

12. FCS CHNL 
CNTL CKT 

- 

- 

- 

3 

- 

2 

5 

TOTAL 

3 

2 

10 

26 

22 

20 

83 
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Table XIII presents a summary of the IOA recommended CIL items for 
the GNC function switches and circuits for the Post 51-L baseline. 


TABLE XIII GNC Function Switches and Circuits 

Summary of IOA Recommended Critical Items 


Criticality: 

1/1 

2/1R 

2/2 

3/1R 

3/2R 

3/3 

TOTAL 

1. TRIM ENABLE 
INHIB SW'S 

- 

- 

— 

— 

— 

“ 

0 

2. TRIM SW'S 

- 


- 

- 

- 

- 

0 

3. TRIM ON/OFF 
SW'S 




— 

— 


0 

4. SENSE -Z/-X 
SW 

- 

- 

- 


' — 

— 

0 

5. R, P/Y CSS/ 
AUTO PBI'S 

2 

- 

- 

— 

— 

— 

2 

6. SPD BK/THROT 
PBI 

- 

- 

- 

- 

— 

— 

0 

7. BODY FLAP 
CNTL CRT 

- 

- 

- 

- 

— 

— 

0 

8. ATT REF PBI 

- 

- 


- 

- 

- 

- 

9. ENTRY MODE 
SW 

- 

- 

— 

— 

— 

— 

— 

10. ABORT MODE 
CKT 

1 

2 

- 

— 

— 

— 

3 

11. DAP PBI'S 

- 

- 

4 

- 

- 

- 

4 

12. FCS CHNL 
CNTL CKT 

- 

- 

- 

- 

— 

— 

0 

TOTAL 

3 

2 

4 

- 

- 

- 

9 

H 
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4.3 ASSESSMENT RESULTS - GNC POWER SWITCHES AND CIRCUITS 

Twelve groups of switches and circuits make up this category. A 
summary of the quantity of NASA FMEAs assessed for the GNC power 
switches and circuits, versus the recommended baseline, and any 
issues identified is presented in Table XIV. 

H f 

Table XIV GNC Power Switches and Circuits 
Summary of IOA FMEA Assessment 

+ + + + + 

j Component | NASA | IOA | Issues j 



H 



1. FLT CNTLR 

4 

3 

0 

PWR CKT 




2. IMU PWR CKT 

6 

3 

2 

3. ST PWR CKT 

1 

2 

0 

4. COAS PWR CKT 

1 

1 

0 

5. ADTA PWR CKT 

2 

3 

0 

6. RGA (ORB) 

5 

4 

0 

PWR CKT 




7. AA PWR CKT 

6 

7 

0 

8. ASA PWR CKT 

8 

2 

2 

9. RJD PWR CKT 

0 

4 

4 

10. ATVC PWR 

7 

7 

0 

CKT 




11. FCS SW 

7 

3 

0 

ANNUN CKT 




12. RGA (SRB) 

1 

1 

0 

PWR CKT 




TOTAL 

48 

40 

8 


Issues resulted from Interpretation of NSTS 22206, Instruction 
for Preparation of FMEA and CIL. IOA treated the circuitry as 
black boxes, and NASA evaluated the components of the black 
boxes. The RJD PWR CKT was not covered by NASA. However, the 
failures covered by IOA did not raise the criticality of the 
component . 
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A summary of the quantity of NASA CIL items assessed for the GNC 
power switches and circuits, versus the recommended IOA baseline, 
and any issues identified is presented in Table XV. 


+ 

Table XV GNC Power Switches and Circuits 

Summary of IOA CIL Assessment 
+ + + + + 


Component | NASA | IOA | Issues 





+ 

1. FLT CNTLR 

2 

2 

0 

PWR CKT 




2. IMU PWR CKT 

1 

1 

0 

3. ST PWR CKT 

0 

0 

0 

4. COAS PWR CKT 

0 

0 

0 

5. ADTA PWR CKT 

0 

0 

0 

6. RGA (ORB) 

1 

1 

0 

PWR CKT 




7. AA PWR CKT 

1 

1 

0 

8. ASA PWR CKT 

3 

3 

0 

9. RJD PWR CKT 

0 

0 

0 

10. ATVC PWR 

3 

3 

0 

CKT 




11. FCS SW 

0 

0 

0 

ANNUN CKT 




12. RGA (SRB) 

1 

1 

0 

PWR CKT 




TOTAL 

12 

12 

0 

+ 
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Table XVI presents a summary of the IOA recommended failure 
criticalities for the GNC power switches and circuits for the 
Post 51-L FMEA baseline. 


•— — — — — — — f- 

TABLE XVI GNC Power Switches and Circuits 

Summary of IOA Recommended Failure Criticalities 


Criticality: 

1/1 

2/1R 

2/2 

3/1R 

3/2R 

3/3 

TOTAL 

1. FLT CNTLR 
PWR CKT 

- 

1 

- 

1 


1 

3 

2. I MU PWR CKT 

- 

- 

- 

2 

- 

1 

3 

3. ST PWR CKT 

- 


- 

2 

- 

- 

2 

4. COAS PWR CKT 

- 


- 

1 

- 

- 

1 

5. ADTA PWR CKT 

- 


- 

1 

- 

2 

3 

6. RGA (ORB) 
PWR CKT 


- 

- 

4 

- 

- 

4 

7. AA PWR CKT 

- 

- 

- 

5 

- 

2 

7 

8. ASA PWR CKT 

- 


- 

1 

- 

1 

2 

9. RJD PWR CKT 

- 

- 

- 

2 

- 

2 

4 

10. ATVC PWR 
CKT 

- 

1 

- 

5 

- 

1 

7 

11. FCS SW 

ANNUN CKT 


- 

- 

3 

- 

- 

3 

12. RGA (SRB) 
PWR CKT 

- 

- 

- 

1 

- 

- 

1 

TOTAL 

- 

2 

- 

28 

- 

10 

40 
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Table XVII presents a summary of the IOA recommended OIL items for 
the GNC power switches and circuits for the Post 51-L baseline. 


+ 

TABLE XVII GNC Power Switches and Circuits 

Summary of IOA Recommended Critical Items 


Criticality: 

1/1 

2/1R 

2/2 

3/1R 

3/2R 

3/3 

TOTAL 

1. FLT CNTLR 
PWR CRT 


1 

1 

— 

— 

— 

2 

2. IMU PWR CKT 

- 

- 


1 

- 


1 

3. ST PWR CKT 

- 


- 

- 

- 

- 

- 

4. COAS PWR CKT 

- 

- 

- 

- 

- 

- 

- 

5. ADTA PWR CKT 

- 

- 

- 

- 

- 

- 

- 

6. RGA (ORB) 
PWR CKT 

- 


- 

1 

— 


1 

7. AA PWR CKT 

- 

- 

- 

1 

- 

- 

1 

8. ASA PWR CKT 


1 

- 

2 


- 

3 

9. RJD PWR CKT 

- 


- 

- 

- 

- 

- 

10. AT VC PWR 
CKT 

- 

1 

- 

2 

- 

— 

3 

11. FCS SW 

ANNUN CKT 

- 

- 

- 

- 

- 

— 

— 

12. RGA (SRB) 
PWR CKT 

- 

- 


1 

- 

- 

1 

TOTAL 

- 

3 

1 

8 

- 


12 

-| 
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APPENDIX A 
ACRONYMS 


AA 

ACA 

A/D 

ADI 

ADTA 

AID 

ALC 

AOA 

APC 

ASA 

ATO 

ATVC 

BF 

BFS 

BITE 

CB 

CIL 

CRT 

CNTLR 

COAS 

CRIT 

CRT 

CSS 

C&W 

DAP 

DDU 

DEU 

DISC 

DPS 

DU 

EIU 

EVA 

FA 

FCOS 

FCS 

FDIR 

FF 

FM 

FMEA 

FSM 

FSSR 

FSW 

FUNC 

GPC 

GSE 

H/W 

IMU 

IOA 


Accelerometer Assembly 
Annunciator Control Assembly 
Analog to Digital 
Attitude Direction Indicator 
Air Data Transducer Assembly 
Analog Input Differential 
Aft Load Controller 
Abort Once Around 
Aft Power Controller 
Aerosurface Servo Amplifier 
Abort To Orbit 
Ascent Thrust Vector Control 
Body Flap 

Backup Flight System 
Built-In Test Equipment 
Circuit Breaker 
Critical Items List 
Circuit 
Controller 

Crew Optical Alignment Sight 
Criticality 
Cathode Ray Tube 
Control Stick Steering 
Caution and Warning System 
Digital Auto Pilot 
Display Driver Unit 
Display Electronics Unit 
Discrete 

Data Processing System 
Display Unit 
Engine Interface Unit 
Extra Vehicular Activity 
Flight Aft 

Flight Control Operating System 
Flight Control System 

Fault Detection, Identification, Reconfiguration 
Flight Forward 
Failure Mode 

Failure Mode and Effects Analysis 
Fault Summary Message 

Functional Subsystem Software Requirements 

Flight Software 

Function 

General Purpose Computer 
Ground Support Equipment 
Hardware 

Inertial Measurement Unit 
Independent Orbiter Assessment 
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LF 

- 

Launch Forward 

LL 

- 

Launch Left 

LPS 


Launch Processing System 

LR 

— 

Launch Right 

LRU 

- 

Line Replaceable Unit 

MAN 

- 

Manual 

MC 

- 

Memory Configuration 

MCC 

- 

Mission Control Center 

MCDS 

- 

Multifunction CRT Display System 

MDAC 

— 

McDonnell Douglas Astronautics Company 

MDM 

- 

Multiplexer/Demultiplexer 

MEC 

- 

Main Engine Controller 

MM 

- 

Major Mode 

MSK 

- 

Manual Select Keyboard 

MVS 

- 

Mid Value Select 

NA 

- 

Not Applicable 

NASA 

— 

National Aeronautics and Space Administration 

NORM 


Normal 

NSTS 

- 

National Space Transportation System 

OA 

— 

Operational Aft 

OF 

- 

Operational Forward 

OMRSD 


Operational Maintenance Requirements and Specifications 
Document 

OMS 

- 

Orbital Maneuvering System 

OPS 

— 

Operational Sequence 

P 

- 

Pitch 

PBI 

• 

Pushbutton Indicator 

PCI 

- 

Potential Critical Item 

PCM 

- 

Pulse Code Modulation 

POS 

- 

Position 

R 

- 

Roll 

RCS 

- 

Reaction Control System 

RGA 

- 

Rate Gyro Assembly 

RHC 

- 

Rotational Hand Controller 

RI 

- 

Rockwell International 

RJD 

- 

Reaction Jet Driver 

RM 

- 

Redundancy Management 

ROT 

- 

Rotation 

RPC 

- 

Remote Power Controller 

RPTA 

- 

Rudder Pedal Transducer Assembly 

RS 

- 

Redundant Set 

RTLS 

- 

Return To Landing Site 

SBTC 

- 

Speed Brake Thrust Controller 

SF 

- 

Selection Filter 

SM 

- 

Systems Management 

SOP 

— 

Subsystem Operating Program 

SRB 

— 

Solid Rocket Booster 

SSME 

- 

Space Shuttle Main Engine 

ST 

— 

Star Tracker 

STS 

- 

Space Transportation System 

SW 

- 

Switch 

S/W 

- 

Software 
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TAL 

Transatlantic 

Abort Landing 

TD 

Touch Down 


THC 

Translational 

Hand Controller 

TRANS - 

Translation 


TVC 

Thrust Vector 

Control 

VDC 

Volts Direct * 

Current 

VERN - 

Vernier 


Y 

Yaw 
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APPENDIX B 


DEFINITIONS, GROUND RULES, AND ASSUMPTIONS 


B.l Definitions 

B. 2 Project Level Ground Rules and Assumptions 
B.3 Subsystem-Specific Ground Rules and Assumptions 
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APPENDIX B 

DEFINITIONS, GROUND RULES, AND ASSUMPTIONS 


B.l Definitions 

Definitions contained in NSTS 22206. Instructions For Preparation 
of FMEA/CIL. 10 October 1986 . were used with the following 
amplifications and additions. 

INTACT ABORT DEFINITIONS: 

RTLS - begins at transition to OPS 6 and ends at transition 
to OPS 9, post-flight 

TAL - begins at declaration of the abort and ends at 
transition to OPS 9, post-flight 

AOA - begins at declaration of the abort and ends at 
transition to OPS 9, post-flight 

ATO - begins at declaration of the abort and ends at 
transition to OPS 9, post-flight 

CREDIBL E (CAUSE) - an event that can be predicted or expected in 
anticipated operational environmental conditions. Excludes an 
event where multiple failures must first occur to result in 
environmental extremes 

CONTING ENCY CREW PROCEDURES - procedures that are utilized beyond 
the standard malfunction procedures, pocket checklists, and cue 
cards 

EARLY MISSION TERMINATION - termination of onorbit phase prior to 
planned end of mission 

EFFECTS/RATIONALE - description of the case which generated the 
highest criticality 

HIGHEST CRITICALITY - the highest functional criticality 
determined in the phase-by-phase analysis 

MAJOR MODE (MM) - major sub-mode of software operational sequence 
(OPS) 

MS - Memory Configuration of Primary Avionics Software System 
(PASS) 

MISSION - assigned performance of a specific Orbiter flight with 
payload/ objective accomplishments including orbit phasing and 
altitude (excludes secondary payloads such as GAS cans, 
middeck P/L, etc.) 
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mttt.ttpt.f order FAILURE - describes the failure due to a single 
cause or event of all units which perform a necessary (critical) 
function 

OFF-NOMINAL CREW PROCEDURES - procedures that are utilized beyond 
the standard malfunction procedures, pocket checklists, and cue 
cards 

OPS - software operational sequence 

PRIMARY MISSION OBJECTIVES - worst case primary mission objec- 
tives are equal to mission objectives 

PHASE DEFINITIONS: 

PRELAUNCH PHASE - begins at launch count-down Orbiter 
power-up and ends at moding to OPS Major Mode 102 (liftoff) 

LIFTOFF MISSION PHASE - begins at SRB ignition (MM 102) and 
ends at transition out of OPS 1 (Synonymous with ASCENT) 

ONORBIT PHASE - begins at transition to OPS 2 or OPS 8 and 
ends at transition out of OPS 2 or OPS 8 

DEORBIT PHASE - begins at transition to OPS Major Mode 
301 and ends at first main landing gear touchdown 

LANDING/SAFING PHASE - begins at first main gear 
touchdown and ends with the completion of post-landing 
safing operations 
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APPENDIX B 

DEFINITIONS, GROUND RULES, AND ASSUMPTIONS 


B.2 IOA Project Level Ground Rules and Assumptions 

The philosophy embodied in NSTS 22206. Instructions for 
Preparation of FMEA/CIL. 10 October 1986 . was employed with the 
following amplifications and additions. 


1. The operational flight software is an accurate 
implementation of the Flight System Software Requirements 
(FSSRs) . 

RATIONALE: Software verification is out-of-scope of 
this task. 

2. After liftoff, any parameter which is monitored by system 
management (SM) or which drives any part of the Caution and 
Warning System (C&W) will support passage of Redundancy 
Screen B for its corresponding hardware item. 

RATIONALE: Analysis of on-board parameter availability 
and/or the actual monitoring by the crew 
is beyond the scope of this task. 

3. Any data employed with flight software is assumed to be 
functional for the specific vehicle and specific mission 
being flown. 

RATIONALE: Mission data verification is out-of-scope of 
this task. 

4. All hardware (including firmware) is manufactured and 
assembled to the design specifications/drawings. 

RATIONALE: Acceptance and verification testing is 

designed to detect and identify problems 
before the item is approved for use. 

5. All Flight Data File crew procedures will be assumed 
performed as written, and will not include human error in 
their performance. 

RATIONALE: Failures caused by human operational error 
are out-of-scope of this task. 
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All hardware analyses will, as a minimum, be performed at 
the level of analysis existent within NASA/Prime Contractor 
Orbiter FMEA/CILs, and will be permitted to go to greater 
hardware detail levels but not lesser. 

RATIONALE: Comparison of IOA analysis results with 

other analyses requires that both analyses 
be performed to a comparable level of 
detail . 

Verification that a telemetry parameter is actually 
monitored during AOS by ground-based personnel is not 
required. 

RATIONALE: Analysis of mission-dependent telemetry 

availability and/or the actual monitoring of 
applicable data by ground-based personnel is 
beyond the scope of this task. 

The determination of criticalities per phase is based on the 
worst case effect of a failure for the phase being analyzed. 
The failure can occur in the phase being analyzed or in 
any previous phase, whichever produces the worst case 
effects for the phase of interest. 

RATIONALE: Assigning phase criticalities ensures a 
thorough and complete analysis. 

Analysis of wire harnesses, cables, and electrical connectors 
to determine if FMEAs are warranted will not be performed 
nor FMEAs assessed. 

RATIONALE: Analysis was substantially complete prior 

to NSTS 22206 ground rule redirection. 

Analysis of welds or brazed joints that cannot be inspected 
will not be performed nor FMEAs assessed. 

RATIONALE: Analysis was substantially complete prior 

to NSTS 22206 ground rule redirection. 

Emergency system or hardware will include burst discs and 
will exclude the EMU Secondary Oxygen Pack (SOP) , pressure 
relief valves and the landing gear pyrotechnics. 

RATIONALE: Clarify definition of emergency systems to 
ensure consistency throughout IOA project. 



APPENDIX B 

DEFINITIONS , GROUND RULES , AND ASSUMPTIONS 

B.3 GNC - Specific Ground Rules and Assumptions 

1. The failure analyses will be conducted to the black box 
level for components whose output serves only one function 
unless a lower level is required to be consistent with the 
existing FMEAs. 

RATIONALE: The definition credible failure modes are 

oriented toward the black box functional 
output . 

2. For black boxes whose output serves more than one function, 
the analysis will go to a level that effects each of the 
different functions. 

RATIONALE: The defined credible failure modes are 

oriented toward the black box functional 
output . 

3. Credible failure modes for most black boxes are defined to 
be 

( 1 ) No output 

(2) Erroneous output (Output that redundancy management 
will detect as a failure.) 

(3) Premature output (Output occurs without command. This 
may not be credible for all black boxes.) 

RATIONALE: Covers worst case effects on function. 

4. Credible failures for switches are defined to be 

(1) Fails on (Power cannot be shut off by switch.) 

(2) Fails off (Power cannot be turned on.) 

(3) Short to ground 

(4) Internal short (Short across switch contacts.) 

RATIONALE: Covers worst case effects on function. 

5. Power circuits analysis does not include the resistors that 
reside between the power circuit and a MDM. 

RATIONALE: These resistors provide signal conditioning 

for the MDM and are not a part of the power 
circuit. 


B-6 



APPENDIX C 
DETAILED ASSESSMENT 


This section contains the IOA assessment worksheets generated 
during the Assessment of the Guidance, Navigation, and Contro 
Subsystem. The information on these worksheets facilitates the 
comparison of the NASA FMEA/CIL (Pre and Post 51-L) to the IOA 
detailed analysis worksheets included in Appendix E. Each of 
these worksheets identifies the NASA FMEA being assessed, 
corresponding MDAC Analysis Worksheet ID (Appendix E), hardware 
item, critical ity, redundancy screens, and recommendations. For 
each failure mode, the highest assessed hardware “J 
criticality is compared and discrepancies noted as N in tne 
compare row under the column where the discrepancy occurre . 


LEGEND FOR IOA ASSESSMENT WORKSHEETS 


Hardware Criticalities: 

1 = Loss of life or vehicle ... 

2 * Loss of mission or next failure of any redundant item 

(like or unlike) could cause loss of life/vehicle 

3 = All others 


Functional Criticalities: 

1R = Redundant hardware items (like 
if failed, could cause loss of 
2R = Redundant hardware items (like 
if failed, could cause loss of 


or unlike) all of which, 
life or vehicle 
or unlike) all of which, 
mission 


Redundancy Screens A, B and C: 
p = Passed Screen 
F = Failed Screen 
NA = Not Applicable 


NASA Data : 
Baseline 
New 


NASA FMEA/CIL 

Baseline with Proposed Post 51-L Changes 


CIL Item : 

X = Included in CIL 
Compare Row : 

N = Non compare for that column (deviation) 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 
ASSESSMENT ID: GNC-101 
NASA FMEA #: 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


05-1-FC3042-1 

GNC 

101 

RHC 

ROBERT O'DONNELL 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


CRITICALITY 

FLIGHT 


REDUNDANCY SCREENS 



HDW/FUNC 

A 

B 


C 

NASA 

[ 1 /I 

] 

( NA] 

[ NA] 

[ 

NA] 

IOA 

[ 2 /1R 

] 

[ P ] 

[ P ] 

[ 

P ] 

COMPARE 

[ N /N 

] 

( N ] 

[ N ] 

[ 

N ] 

RECOMMENDATIONS : 


(If different 

from 

NASA) 



[ / 

] 

[ ] 

[ ] 

[ 

] 


CIL 

ITEM 


[ X ] 

[ X ] 

C ] 


C ] 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ X ] 

REMARKS: INADEQUATE [ ] 

IOA FAILURE MODE: PHYSICAL BINDING/ JAMMING OF CNTL STICK 
FMEA FAILURE MODE: PHYSICAL JAMMING. 

IOA DOES CONCUR WITH NASA'S REEVALUATION AND RATIONALE AS SHOWN 
IN THE NASA- JSC FMEA REVIEW COMMENTS. IF AN RHC SHOULD JAM 
DURING THE CRITICAL ENTRY FLIGHT PHASE OF FINAL FLARE AND LANDING 
APPROACH MANEUVERS, LOSS OF CONTROL COULD CAUSE LOSS OF VEHICLE. 
IOA DOES NOT RECOMMEND A CHANGE TO THE REVISED NASA FMEA. 


REPORT DATE 02/03/88 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 NASA DATA: 

ASSESSMENT ID: GNC-102 BASELINE [ ] 

NASA FMEA #: 05-1-FC3042-2 NEW [ X ] 

SUBSYSTEM: GNC 

MDAC ID: 102 

ITEM: RHC 

LEAD ANALYST: ROBERT O'DONNELL 

ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 

NASA [ 3 /1R ] [ P ] [ P ] [ P ] 

IOA [ 3 /1R ] [ P ] [ P ] [ P ] 

COMPARE [ / ] [ ] [3 C 3 


RECOMMENDATIONS: (If different from NASA) 

[ / 3 [][][] [ 3 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ) 

INADEQUATE ( ] 

REMARKS ! 

IOA FAILURE MODE: NO XDCR OUTPUT ON A CMD CHN. 

FMEA FAILURE MODE: LOSS OF A CHN-TRANSDUCER OR SWITCH. 

NO DIFFERENCES. 


CIL 

ITEM 


[ 3 * 

[ 3 

[ 3 


REPORT DATE 02/03/88 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 

ASSESSMENT ID: GNC-103 

NASA FMEA #: 05-1-FC3042-3 

SUBSYSTEM: GNC 

MDAC ID: 103 

ITEM: RHC 

LEAD ANALYST: ROBERT O'DONNELL 

ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 

NASA [ 3 /1R ] [ P ] [ P ] [ P ] 

IOA [ 3 /1R ] [ P ] [ P ] [ P ] 

COMPARE [ / ] [][][] 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [][][] [ ] 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ) 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: ERRONEOUS XDCR OUTPUT ON A CMD CHN. 

FMEA FAILURE MODE: ERRONEOUS OUTPUT-TRANSDUCER OR SWITCH. 

NO DIFFERENCES. 


CIL 

ITEM 


[ ] * 

[ ] 

[ 3 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


REPORT DATE 02/03/88 


C-4 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 NASA DATA: 

ASSESSMENT ID: GNC-104 BASELINE [ ] 

NASA FMEA #: 05-1-FC3042-2 NEW [ X ] 

SUBSYSTEM: GNC 

MDAC ID: 104 

ITEM: RHC 

LEAD ANALYST: ROBERT O'DONNELL 

ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 

NASA [ 3 /1R ] [ P ] [ P ] [ P ] 

IOA [ 3 /3 ] [ NA] [ NA] [ NA] 

COMPARE [ /N ] [ N ] [ N ] [ N ] 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [][][] C ] 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: NO OUTPUT ON A TRIM SW CHN. 

FMEA FAILURE MODE: LOSS OF A CHN-TRANSDUCER OR SWITCH. 

THE NASA FMEA COVERS TWO FAILURES WHICH INCLUDES THIS IOA FAILURE 
MODE. SINCE THIS FAILURE MODE IS OF LOWER CRITICALITY THAN THE 
OTHER NASA FAILURE MODE, IOA DOES NOT RECOMMEND THAT A NEW FMEA 
BE WRITTEN. 


CIL 

ITEM 


C ] * 
[ ] 

[ ] 


REPORT DATE 02/03/88 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 


1/23/87 

GNC-105 

05-1-FC3042-3 

GNC 

105 

RHC 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


LEAD ANALYST: ROBERT O'DONNELL 

ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [ 3 /1R ] 

[ P ] 

[ P ] 

[ P 3 

[ ] 

IOA [3/3 ] 

[ NA] 

[ NA] 

[ NA] 

C 3 

COMPARE [ /N ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 


* 


RECOMMENDATIONS : 


(If different from NASA) 


[ / ] C ] [ ] [ 


[ ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: TRIM SW CHN FAILS ON. 

FMEA FAILURE MODE: ERRONEOUS OUTPUT-TRANSDUCER OR SWITCH. 

THE NASA FMEA COVERS TWO FAILURES WHICH INCLUDES THIS IOA FAILURE 
MODE. SINCE THIS FAILURE MODE IS OF LOWER CRITICALITY THAN THE 
OTHER NASA FAILURE MODE, IOA DOES NOT RECOMMEND THAT A NEW FMEA 
BE WRITTEN. 


REPORT DATE 02/03/88 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 
ASSESSMENT ID: GNC-110 

NASA FMEA #: 05-6Q-2203-2 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

110 

CIRCUIT-FLT CNTLR PWR 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

C 


NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ ] * 

IOA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ ] 

COMPARE 

[ / ] 

[ ] 

[ ] 

[ ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ / ] 

[ ] 

[ ] 

[ ] 

[ ] 



* 

i • 

_ i. _ \ 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 


REMARKS: 

IOA FAILURE MODE: CB OR SW FAILS CLOSED. FMEA FAILURE MODE: SW 
FLs CLOSED IN "ON" POSITION. NO DIFFERENCES. IF SWITCH FAILS ON, 
THE FLIGHT CONTROLLER POWER CAN BE TURNED OFF BY THE ASSOCIATED 
DDU CIRCUIT BREAKERS. 


REPORT DATE 02/03/88 


C-7 



APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 
ASSESSMENT ID: GNC-111 

NASA FMEA #: 05-6Q-2103-1 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

111 

CIRCUIT-FLT CNTLR PWR 


LEAD ANALYST: ROBERT O'DONNELL 

ASSESSMENT: 



CRITICALITY 


REDUNDANCY SCREENS 

CIL 


FLIGHT 

HDW/FUNC 


A 

B 

C 

ITEM 

NASA 

[ 3 /1R ] 

[ 

p 3 

[ F ] 

[ P 3 

[ X ] * 

IOA 

[ 3 /1R ] 

[ 

p ] 

[ P 3 

[ P 3 

[ 3 

COMPARE 

[ / ] 

[ 

] 

[ N ] 

[ 3 

[ N ] 

RECOMMENDATIONS : (If 

different from NASA) 



[ / ] 

[ 

] 

[ 3 

[ 3 

[ 3 







(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If 

applicable) 

rt tv mm r i 


ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: CB OR SW FAILS OPEN, OR SHORTED TO GROUND, 

FMEA FAILURE MODE: CIRCUIT BREAKIER-LOSS OF OUTPUT, OPENS. 

AFTER NASA/RI REEVALUATION OF FMEA AND FURTHER IOA EVALUATION OF 
SYSTEM OPERATION, IOA DOES CONCUR WITH THE REVISED FMEA. ONE 
REDUNDANT CIRCUIT BREAKER (CB) FL OPEN IS NOT DETECTABLE. TWO 
CBS FL OPEN ARE NOT DETECTABLE, BUT THE RESULTING LOSS OF THE DDU 
POWER SUPPLIES (A, B, C) ARE DETECTABLE. SINCE CB FL CLOSE IS A 
3/3, AND DOES NOT UPGRADE OPEN FAIL MODE 3/1R, IOA DOES 
NOT RECOMMEND A NEW FMEA FOR THE CLOSE FL MODE. THE CIL WAS NOT 
AVAILABLE FOR EVALUATION OF THE RETENTION RATIONALE. 


REPORT DATE 02/03/88 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 
ASSESSMENT ID: GNC-111A 

NASA FMEA #: 05-6Q-2203-1 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

111 

CIRCUIT-FLT CNTLR PWR 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 


FLIGHT 

HDW/FUNC 

A 

B 


C 

ITEM 

NASA 

[ 2 /1R ] 

[ P ] 

[ P 

] 

[ P 3 

[ X ] * 

IOA 

[ 3 /1R ] 

[ P ] 

[ P 

] 

[ P ] 

[ ] 

COMPARE 

[ N / ] 

[ ] 

[ 

] 

[ ] 

[ N ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ / ] 

( ] 

[ 

] 

[ ] 

[ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: CB OR SW FAILS OPEN, OR SHORTED TO GROUND. 

FMEA FAILURE MODE: SW FLs CLOSED IN "OFF" POSITION, SHORT TO 
GROUND AT "ON" POSITION CONTACTS, POLE-TO-POLE SHORT. IOA 
INITIALLY CONSIDERED THE SWITCH CONTACT FAIL OPEN MODE, WHICH 
PROVIDED T HE CRITICALITY OF 3/1R. AFTER NASA/RI REEVALUATION OF 
FMEA AND FURTHER IOA EVALUATION OF SYSTEM OPERATION, IOA DOES 
CONCUR WITH THE REVISED FMEA CRITICALITY OF 2/1R FOR THE SWITCH 
FAILURE MODES. THE LEFT AND RIGHT FLT CNTRL SWs FAILED IN 
THE OFF POSITION RESULTS IN THE LOSS OF THE PLT'S AND CDR'S 
FLIGHT CONTRO LLER S AND PROBABLE LOSS OF VEHICLE CONTROL. THE CIL 
WAS NOT AVAILABLE FOR EVALUATION OF THE RETENTION RATIONALE. 


REPORT DATE 02/03/88 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 

ASSESSMENT ID: GNC-111B 

NASA FMEA #: 05-6Q-2203- (TBD) PREL 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

111 

CIRCUIT-FLT CNTLR PWR 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [2/2 ] 

[ P ] 

[ P ] 

[ P ] 

[ x 

IOA [ 3 /1R ] 

[ P ] 

[ P ] 

[ P ] 

[ 

[PARE [ N /N ] 

[ ] 

[ ] 

[ ] 

[ N 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [][][] [ ] 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: CB OR SW FAILS OPEN, OR SHORTED TO GROUND. 

FMEA FAILURE MODE: AFT PWR CNTLR SW FAILED CLOSED IN "OFF" 
POSITION, SHORT TO GROUND AT "ON" POSITION CONTACTS, POLE-TO-POLE 
SHORT. 

NASA AND IOA INITIALLY CONSIDERED THE LEFT, RIGHT, AND AFT 
SWITCHES AS A GROUP WITH FAILURE OFF (OPEN) MODE OF CRIT 3/1R. 
AFTER FURTHER EVALUATION OF SYSTEM OPERATION, IOA DOES CONCUR 
WITH THE NEW FMEA FAIL OFF (OPEN) MODE FOR AFT FLT CNTLR PWR SW. 
THE LOSS OF THE AFT FLT CNTLR' S (RHC/THC) WOULD MAKE IT DIFFICULT 
TO PERFORM MISSIONS REQUIRING RENDEZVOUS AND PROX OPS. THE CIL 
WAS NOT AVAILABLE FOR EVALUATION OF THE RETENTION RATIONALE. 


REPORT DATE 02/03/88 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


1/23/87 

GNC-120 

05-1-FC7241-0001 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

120 

SWITCH-TRIM ENABLE/ INHIBIT 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 

HDW/FUNC 

A B 

C 

ITEM 

NASA 

[3/3 ] 

[ NA] [ NA] 

[ NA] 

[ ] * 

IOA 

[3/3 ] 

[ NA] [ NA] 

[ NA] 

[ ] 

COMPARE 

[ / ] 

[ ] [ ] 

[ ] 

[ ] 

RECOMMENDATIONS : (If 

different from 

NASA) 



[ / 1 

[ ] [ ] 

[ 3 

[ 3 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS ; 

IOA FAILURE MODE: SWITCH CONTACT FAILS CLOSED (INHIBIT POSITION). 
FMEA FAILURE MODE: ALL CREDIBLE MODES. 

NO DIFFERENCES . 


REPORT DATE 02/03/88 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE 
ASSESSMENT ID: 
NASA FMEA #: 


1/23/87 

GNC-121 

05-1-FC72 4 1-0001 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

121 

SWITCH-TRIM ENABLE/ INHIBIT 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 


CIL 

ITEM 


NASA [3/3 ] [ NA] [ NA] [ NA] 

IOA [3/3 ] [ NA] [ NA] [ NA] 


[ ] * 

C ] 


COMPARE [ / 


3 


RECOMMENDATIONS: (If different from NASA) 


C / 3 [][][] [ ] 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: SW CONTACT OR CURRENT LIMIT RESISTOR FAILS OPEN 
OR SHORTED TO GROUND. 

FMEA FAILURE MODE: ALL CREDIBLE MODES. 

NO DIFFERENCES. 


REPORT DATE 02/03/88 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


1/23/87 

GNC-130 

05-1-FC7254-1 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

130 

SWITCH-TRIM 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

C 


NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ ] * 

IOA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ 3 

COMPARE 

[ / 1 

[ ] 

[ ] 

[ ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ / ] 

[ ] 

[ ] 

[ ] 

[ ] 

/inn/nFT.ETFl 


(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS ! 

IOA FAILURE MODE: SWITCH CONTACT FAILS CLOSED. 

FMEA FAILURE MODE: ALL CREDIBLE MODES-ROLL TRIM. 

NO DIFFERENCES. 


REPORT DATE 02/03/88 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 


1/23/87 

GNC-130A 

05-1-FC7255-1 

GNC 

130 

SWITCH-TRIM 
ROBERT O'DONNELL 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 

NASA [ 3 /3 ] [ NA] [ NA] [ NA] 

IOA [ 3 /3 ] [ NA] [ NA] [ NA] 

COMPARE [ / ] [][][] 


CIL 

ITEM 


[ ] * 
[ ] 

C ] 


RECOMMENDATIONS : 

[ / 


(If different from NASA) 

[ ] [ ] [ 


[ ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: SWITCH CONTACT FAILS CLOSED. 

FMEA FAILURE MODE: ALL CREDIBLE MODES-PITCH TRIM. 

NO DIFFERENCES. 


REPORT DATE 02/03/88 


C-14 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 
ASSESSMENT ID: GNC-130B 

NASA FMEA #: 05-1-FC7256-1 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

130 

SWITCH-TRIM 


LEAD ANALYST: ROBERT 0 1 DONNELL 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

FLIGHT 




HDW/FUNC 

A 

B 

C 

NASA [3/3 ] 

[ NA] 

[ NA] 

[ NA] 

IOA [3/3 ] 

[ NA] 

[ NA] 

[ NA] 

COMPARE [ / ] 

[ ] 

[ ] 

[ ] 


CIL 

ITEM 


t ] * 

[ ] 

[ ] 


RECOMMENDATIONS: (If different from NASA) 

[ / ] t ] [ ] [ ] t ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: SWITCH CONTACT FAILS CLOSED. 

FMEA FAILURE MODE: ALL CREDIBLE MODES-YAW TRIM. 

NO DIFFERENCES. 


REPORT DATE 02/03/88 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 


1/23/87 

GNC-131 

05-1-FC7254-1 

GNC 

131 

SWITCH-TRIM 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


LEAD ANALYST: ROBERT O'DONNELL 

ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 


C 

ITEM 

NASA 

[3/3 ] 

[ NA] [ 

NA] 

[ 

NA] 

[ ] * 

IOA 

[3/3 ] 

[ NA] [ 

NA] 

[ 

NA] 

[ ] 

COMPARE 

[ / ] 

[ ] [ 

] 

[ 

] 

[ ] 

RECOMMENDATIONS : 

(If different 

from 

NASA) 




[ / ] 

[ ] [ 

] 

[ 

] 

[ ] 







(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: SW CONTACT FAILS OPEN, OR SHORTED TO GROUND. 
FMEA FAILURE MODE: ALL CREDIBLE MODES -ROLL TRIM. 

NO DIFFERENCES. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 
ASSESSMENT ID: GNC-131A 

NASA FMEA #: 05-1-FC7255-1 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

131 

SWITCH-TRIM 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ ] * 

IOA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ ] 

COMPARE 

[ / 3 

[ ] 

[ ] 

[ ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ / ] 

[ ] 

[ ] 

[ ] 

[ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 



ADEQUATE 

[ 

] 


INADEQUATE 

[ 

] 

REMARKS: 

IOA FAILURE MODE: 

SW CONTACT FAILS OPEN, OR SHORTED 

TO 

GROUND 

FMEA FAILURE MODE: 
NO DIFFERENCES. 

ALL CREDIBLE MODES-PITCH TRIM. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 


1/23/87 

GNC-131B 

05-1-FC7256-1 

GNC 

131 

SWITCH-TRIM 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


LEAD ANALYST: ROBERT O'DONNELL 

ASSESSMENT: 



CRITICALITY 


REDUNDANCY SCREENS 

CIL 


FLIGHT 

HDW/FUNC 


A 

B 

c 

ITEM 

NASA 

[ 3 /3 

] 

[ 

NA] 

[ NA] 

[ NA] 

t ] * 

IOA 

[ 3 /3 

] 

[ 

NA] 

[ NA] 

[ NA] 

C ] 

COMPARE 

C / 

] 

c 

] 

[ ] 

[ ] 

[ ] 

RECOMMENDATIONS : 

(If 

different from NASA) 



C / 

] 

[ 

] 

[ ] 

[ ] 

[ ] 








(ADD/ DELETE) 

* CIL RETENTION 

RATIONALE: (If 

applicable) 

H T\T7! /%TT 

« mn r -» 


ADEQUATE 

[ 

] 

INADEQUATE 

c 

] 

REMARKS: 



IOA FAILURE MODE: SW CONTACT FAILS OPEN, OR SHORTED 
FMEA FAILURE MODE: ALL CREDIBLE MODES-YAW TRIM. 

TO 

GROUND 


NO DIFFERENCES. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


1/23/87 

GNC-140 

05-1-FC7 242-0001 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

140 

SWITCH-TRIM ON/OFF 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC 

A 

B 


C 

NASA [3/3 ] 

[ NA] 

[ NA] 

[ 

NA] 

IOA [3/3 ] 

[ NA] 

[ NA] 

[ 

NA] 


COMPARE 


/ ] [][][] 


CIL 

ITEM 


[ ] * 

[ ] 

[ ] 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [][][] C 3 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS 2 

IOA FAILURE MODE: SWITCH CONTACT FAILS CLOSED. 

FMEA FAILURE MODE: ALL CREDIBLE MODES. 

NO DIFFERENCES. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 


1/23/87 

GNC-141 

05-1-FC7 242-0001 

GNC 

141 

SWITCH-TRIM ON/OFF 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS 


FLIGHT 




HDW/FUNC 

A 

B 

C 


CIL 

ITEM 


NASA [ 3 /3 ] [ NA] [ NA] [ NA] 

IOA C 3 /3 ] [ NA] [ NA] [ NA] 


[ ] * 
[ ] 


COMPARE [ / 


] 


RECOMMENDATIONS : 

[ / 


(If different from NASA) 

[ ] [ ] [ 


C ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: SW CONTACT OR CURRENT LIMIT RESISTOR FAILS OPEN 
OR SHORTED TO GROUND. 

FMEA FAILURE MODE: ALL CREDIBLE MODES. 

NO DIFFERENCES. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


1/23/87 

GNC-150 

05-1-FC7262-0001 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

150 

SWITCH-SENSE 


LEAD ANALYST: ROBERT O'DONNELL 

ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC A B 


NASA [3/3 ] 

IOA [3/3 ] 


[ NA] [ NA] [ NA] 

[ NA] [ NA] [ NA] 


CIL 

ITEM 


[ 3 * 

[ ] 


COMPARE [ / 


] 


RECOMMENDATIONS : 


(If different from NASA) 


[ / 


[ 


[ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 


REMARKS ! 

IOA FAILURE MODE: SWITCH CONTACT FAILS CLOSED. 
FMEA FAILURE MODE: ALL CREDIBLE MODES. 

NO DIFFERENCES. 


REPORT DATE 02/03/88 


C-21 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 


1/23/87 

GNC-151 

05-1-FC72 62-0001 

GNC 

151 

SWITCH-SENSE 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


LEAD ANALYST: ROBERT O'DONNELL 

ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 

NASA [3/3 ] 

IOA [3/3 ] 

COMPARE [ / ] 


REDUNDANCY SCREENS 


A 

B 


C 

NA] 

[ NA] 

[ 

NA] 

NA] 

[ NA], 

[ 

NA] 

] 

[ ] 

[ 

] 


CIL 

ITEM 


[ ] * 
[ ] 

[ ] 


RECOMMENDATIONS : 


(If different from NASA) 


[ / ] [ 

* CIL RETENTION RATIONALE: 


REMARKS: 


] C ] [ ] [ ] 

(ADD/DELETE) 

(If applicable) 

ADEQUATE [ ] 

INADEQUATE [ j 


IOA FAILURE MODE: SW CONTACT OR CURRENT LIMIT RESISTOR FAILS OPEN 
OR SHORTED TO GROUND. 

FMEA FAILURE MODE: ALL CREDIBLE MODES. 

NO DIFFERENCES. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


1/23/87 

GNC-160 

05-1-FC7245-0001 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

160 

SWITCH- P, R/Y, CSS/AUTO 


LEAD ANALYST: 


ROBERT O'DONNELL 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ ] 

IOA [ 3 /1R ] 

[ P ] 

[ P ] 

[ p ] 

[ ] 

COMPARE [ /N ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 


RECOMMENDATIONS: (If different from NASA) 

[ 1 /I ] [ NA] [ NA] [ NA] [ X ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS ! 

IOA FAILURE MODE: SWITCH CONTACT FAILS CLOSED. FMEA FAILURE 
MODE: PITCH AUTO PBI SW FAILS TO TRANSFER. FOR AUTO PBI FAILED 
ON (PBI FAILED TO TRANSFER OR JAMMED ) , THE WORST CASE CRITICALITY 
IS 1/1. 

IF AUTO PBI SW FAILS ON, THE CREW WILL BE REQUIRED TO DEPRESS AND 
HOLD CSS PBI FOR MANUAL CONTROL. IN ORBIT (OPS 2/8) , THE SWITCH 
CAN BE DESELECTED FROM REDUNDANCY MANAGEMENT. NO AUTO LAND 
CONSIDERED AT THIS TIME. THIS FAILURE WILL CAUSE A CHANGE 
IN OPERATING PROCEDURES AND WILL RESULT IN AN INCREASE IN 
WORKLOAD. 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


1/23/87 

GNC-160A 

05-1-FC7246-0001 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

160 

SWITCH- P, R/Y, CSS/AUTO 


LEAD ANALYST: ROBERT O'DONNELL 

ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

FLIGHT 




HDW/FUNC 

A 

B 

C 

NASA [3/3 ] 

[ NA] 

[ NA] 

[ NA] 

IOA [ 3 /1R ] 

[ P ] 

[ P ] 

[ p ] 

COMPARE [ /N ] 

[ N ] 

[ N ] 

[ N ] 


RECOMMENDATIONS: (If different from NASA) 

C 3 /1R ] [ P ] [ P ] [ P ] 


CIL 

ITEM 


[ ] * 

[ ] 

[ ] 


[ ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: SWITCH CONTACT FAILS CLOSED. FMEA FAILURE 
MODE: PITCH CSS PBI SW FAILS TO TRANSFER. IF CSS PBI FAILS ON, 
THERE IS NO MANUAL OVERRIDE CAPABILITY. WHEN IN ORBIT (OPS 2/8), 
THE SWITCH CAN BE DESELECTED FROM REDUNDANCY MANAGEMENT. THE 
MISSION CAN BE COMPLETED IN THE MANUAL CSS MODE FOR ENTRY. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 
ASSESSMENT ID: GNC-160B 

NASA FMEA #: 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


05-1-FC7248-0001 

GNC 

160 

SWITCH- P, R/Y, CSS/ AUTO 
ROBERT O'DONNELL 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

C 


NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ ] * 

IOA 

[ 3 /1R ] 

[ P ] 

[ P ] 

[ p ] 

[ ] 

COMPARE 

[ /N ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[1/1 ] 

[ P ] 

[ P ] 

[ P ] 

[ x ] 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS • 

IOA FAILURE MODE: SWITCH CONTACT FAILS CLOSED. FMEA FAILURE 
MODE: ROLL/ YAW AUTO PBI SW FAILS TO TRANSFER. FOR AUTO PBI 
FAILED ON (PBI FAILED TO TRANSFER OR JAMMED) , THE WORST CASE 
CRITICALITY IS 1/1. 

IF AUTO PBI SW FAILS ON, THE CREW WILL BE REQUIRED TO DEPRESS AND 
HOLD CSS PBI FOR MANUAL CONTROL. IN ORBIT (OPS 2/8) , THE SWITCH 
CAN BE DESELECTED FROM REDUNDANCY MANAGEMENT. NO AUTOLAND 
CONSIDERED AT THIS TIME. THIS FAILURE WILL CAUSE A CHANGE 
IN OPERATING PROCEDURES AND WILL RESULT IN AN INCREASE IN 
WORKLOAD. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 NASA DATA: 

ASSESSMENT ID: GNC-160C BASELINE [ ] 

NASA FMEA #: 05-1-FC7249-0001 NEW [ X ] 

SUBSYSTEM: GNC 

MDAC ID: 160 

ITEM: SWITCH- P, R/Y, CSS/ AUTO 

LEAD ANALYST: ROBERT O'DONNELL 

ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS CIL 

FLIGHT ITEM 

HDW/FUNC ABC 

NASA [ 3 /3 ] [ NA] [ NA] [ NA] 

IOA [ 3 /1R ] [ P ] [ P ] [ P ] 

COMPARE [ /N ] [ N ] [ N ] [ N ] 


RECOMMENDATIONS: (If different from NASA) 

[ 3 /1R ] [ P ] [ P ] [ P ] [ ] 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: SWITCH CONTACT FAILS CLOSED. FMEA FAILURE 
MODE: ROLL/YAW CSS PBI SW FAILS TO TRANSFER. IF CSS PBI FAILS 
ON, THERE IS NO MANUAL OVERRIDE CAPABILITY. WHEN IN ORBIT (OPS 
2/8), THE SWITCH CAN BE DESELECTED FROM REDUNDANCY MANAGEMENT. 
THE MISSION CAN BE COMPLETED IN THE MANUAL CSS MODE FOR ENTRY. 


[ ] * 
[ ] 

[ ] 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


1/23/87 

GNC-160D 

05-1-FC7245-0002 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

160 

SWITCH- P, R/Y, CSS/ AUTO 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ ] 

IOA [ 3 /1R ] 

[ P ] 

[ P ] 

[ p ] 

C ] 

COMPARE [ /N ] 

[ N ] 

[ N ] 

[ N ) 

[ ] 


RECOMMENDATIONS: (If different from NASA) 

[ 3 /1R ] [ P ] [ P ] [ P ] 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS z 

IOA FAILURE MODE: SWITCH CONTACT FAILS CLOSED. FMEA FAILURE 
MODE: PITCH AUTO PBI SW CONTACT -INTERNAL SHORT. 

THE SW CONTACT FAILURES ARE HANDLED BY THE STANDARD 3 CONTACT SW 
REDUNDANCY MANAGEMENT (RM) . SW RM DESELECTS FIRST FAILED CONTACT 
AND REQUIRES THE "AND" OF TWO CONTACTS FOR AN OUTPUT. IF AUTO 
PBI SW FLs ON, THE CREW WILL BE REQUIRED TO DEPRESS AND 
HOLD CSS PBI FOR MANUAL CNTL. IN ORBIT (OPS 2/8) , THE SW CAN BE 
DESELECTED FROM RM. NO AUTOLAND CONSIDERED. THIS FAILURE WILL 
CAUSE A CHANGE IN OPERATING PROCEDURES AND INCREASE IN WORKLOAD. 


[ ] 

(ADD/ DELETE) 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


1/23/87 

GNC-160E 

05-1-FC7246-0002 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

160 

SWITCH- P, R/Y, CSS/AUTO 


LEAD ANALYST: ROBERT O'DONNELL 

ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS 

FLIGHT 



HDW/FUNC 

A 

B 

C 

NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

IOA 

[ 3 /1R ] 

[ P ] 

[ P ] 

[ p ] 

COMPARE 

[ /N ] 

[ N ] 

[ N ] 

[ N ] 


CIL 

ITEM 


[ ] * 

[ ] 

[ ] 


RECOMMENDATIONS: (If different from NASA) 

[ 3 /1R ] [ P ] [ P ] [ P ] [ ] 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: SWITCH CONTACT FAILS CLOSED. FMEA FAILURE 
MODE: PITCH CSS PBI SW CONTACT- INTERNAL SHORT. 

THE SW CONTACT FAILURES ARE HANDLED BY THE STANDARD 3 CONTACT SW 
REDUNDANCY MANAGEMENT (RM) . SW RM DESELECTS FIRST FAILED CONTACT 
AND REQUIRES THE "AND" OF TWO CONTACTS FOR AN OUTPUT. IF CSS PBI 
FAILS ON, THERE IS NO MANUAL OVERRIDE CAPABILITY. 

WHEN IN ORBIT (OPS 2/8), THE SWITCH CAN BE DESELECTED FROM RM. 

THE MISSION CAN BE COMPLETED IN THE MANUAL CSS MODE FOR ENTRY. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 

ASSESSMENT ID: GNC-160F 

NASA FMEA #: 05-1-FC7248-0002 

SUBSYSTEM: GNC 

MDAC ID: 160 

ITEM: SWITCH- P, R/Y, CSS/ AUTO 

LEAD ANALYST: ROBERT O'DONNELL 

ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS CIL 

FLIGHT ITEM 

HDW/FUNC ABC 

NASA [ 3 /3 ] [ NA] [ NA] [ NA] [ ] * 

IOA [ 3 /1R ] [P] [P] [ p ] [] 

COMPARE [ /N ] [ N ] [ N ] [ N ] [ ] 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


RECOMMENDATIONS: (If different from NASA) 

[ 3 /1R ] [ P 3 C P 1 [ P 3 


[ 3 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS : 

IOA FAILURE MODE: SWITCH CONTACT FAILS CLOSED. FMEA FAILURE 
MODE: ROLL/ YAW AUTO PBI SW CONT- INTERNAL SHORT. 

THE SW CONTACT FAILURES ARE HANDLED BY THE STANDARD 3 CONTACT SW 
REDUNDANCY MANAGEMENT (RM) . SW RM DESELECTS FIRST FAILED CONTACT 
AND REQUIRES THE "AND" OF TWO CONTACTS FOR AN OUTPUT. IF AUTO 
PBI SW FLS ON, THE CREW WILL BE REQUIRED TO DEPRESS AND 
HOLD CSS PBI FOR MANUAL CNTL. IN ORBIT (OPS 2/8) , THE SW CAN BE 
DESELECTED FROM RM. NO AUTOLAND CONSIDERED. THIS FAILURE WILL 
CAUSE A CHANGE IN OPERATING PROCEDURE AND INCREASE IN WORKLOAD. 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


1/23/87 
GNC-160G 
05-1-FC72 4 9-0002 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

160 

SWITCH- P, R/Y, CSS/ AUTO 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ 

IOA [ 3 /1R ] 

[ P ] 

[ P ] 

[ p ] 

[ 

COMPARE [ /N ] 

[ N ] 

[ N ] 

[ N ] 

[ 


RECOMMENDATIONS: (If different from NASA) 

[ 3 /1R ] [ P ] [ P ] [ P ] 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: SWITCH CONTACT FAILS CLOSED. FMEA FAILURE 
MODE: ROLL/ YAW CSS PBI SW CONT-INTERNAL SHORT. 

THE SW CONTACT FAILURES ARE HANDLED BY THE STANDARD 3 CONTACT SW 
REDUNDANCY MANAGEMENT (RM) . SW RM DESELECTS FIRST FAILED CONTACT 
AND REQUIRES THE "AND" OF TWO CONTACTS FOR AN OUTPUT. IF CSS PBI 
FAILS ON, THERE IS NO MANUAL OVERRIDE CAPABILITY. 

WHEN IN ORBIT (OPS 2/8) , THE SWITCH CAN BE DESELECTED FROM RM. 

THE MISSION CAN BE COMPLETED IN THE MANUAL CSS MODE FOR ENTRY. 


[ ] 

(ADD/ DELETE) 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


1/23/87 

GNC-161 

05-1-FC7245-0001 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

161 

SWITCH- P, R/Y, CSS/ AUTO 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 


FLIGHT 





HDW/FUNC 

A 

B 

C 

NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

IOA 

[ 3 /1R ] 

[ P ] 

[ P ] 

[ p ] 

COMPARE 

[ /N ] 

[ N ] 

[ N ] 

[ N ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 


[ 3 /1R ] 

[ P ] 

[ P ] 

[ P ] 


CIL 

ITEM 


[ ] * 

C 1 

[ ] 


[ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS • 

IOA FAILURE MODE: SWITCH CONTACT FAILS OPEN. FMEA FAILURE MODE: 
PITCH AUTO PBI SW FAILS TO TRANSFER. 

IF AUTO PBI FAILS OFF, THE OTHER CREW POSITION CAN BE USED. FCS 
IS INITIALIZED IN AUTO DURING ASCENT. IF NECESSARY, CSS CAN BE 
FLOWN DURING ASCENT. CSS MANUAL MODE CAN BE FLOWN DURING ALL 
ENTRY PHASES. NO AUTOLAND IS CONSIDERED AT THIS TIME. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


1/23/87 

GNC-161A 

05-1-FC7246-0001 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

161 

SWITCH- P, R/Y, CSS/AUTO 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

C ) 

IOA 

[ 3 /1R ] 

[ P ] 

[ P ] 

[ P ] 

[ ] 

COMPARE 

[ /N ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 

RECOMMENDATIONS : 

(If different 

from NASA) 



[ 3 /1R ] 

t P ] 

[ P ] 

[ P ] 

( ] 


(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: SWITCH CONTACT FAILS OPEN. FMEA FAILURE MODE: 
PITCH CSS PBI SW FAILS TO TRANSFER. 

IF CSS PBI SW FAILS OFF, USE THE OTHER CREW POSITION OR PLACE THE 
RHC OUT-OF-DETENT FOR MANUAL FCS CONTROL. NO AUTOLAND IS 
CONSIDERED AT THIS TIME. 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


1/23/87 

GNC-161B 

05-1-FC7248-0001 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

161 

SWITCH- P, R/Y, CSS/ AUTO 


LEAD ANALYST: ROBERT O'DONNELL 

ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

FLIGHT 




HDW/FUNC 

A 

B 

C 

NASA [3/3 ] 

[ NA] 

[ NA] 

[ NA] 

IOA [ 3 /1R ] 

[ P 3 

[ P ] 

[ p ] 

COMPARE [ /N ] 

[ N ] 

[ N ] 

[ N ] 


RECOMMENDATIONS: (If different from NASA) 

[ 3 /1R ] ( P ] [ P ] [ P ] 


CIL 

ITEM 


[ ] * 

[ ] 

[ ] 


[ 1 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS ! 

IOA FAILURE MODE: SWITCH CONTACT FAILS OPEN. FMEA FAILURE MODE: 
ROLL/YAW AUTO PBI SW FAILS TO TRANSFER. 

IF AUTO PBI FAILS OFF, THE OTHER CREW POSITION CAN BE USED. FCS 
IS INITIALIZED IN AUTO DURING ASCENT. CSS MANUAL MODE CAN BE 
FLOWN DURING ALL ENTRY PHASES. NO AUTOLAND IS CONSIDERED AT THIS 
TIME. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


1/23/87 

GNC-161C 

05-1-FC7249-0001 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

161 

SWITCH- P, R/Y, CSS/AUTO 


LEAD ANALYST: ROBERT O’DONNELL 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ ] 

IOA [ 3 /1R ] 

[ P ] 

[ P ] 

[ p ] 

[ ] 

COMPARE [ /N ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 


RECOMMENDATIONS: (If different from NASA) 

[ 3 /1R ] [ P ] [ P ] [ P ] [ ] 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: SWITCH CONTACT FAILS OPEN. FMEA FAILURE MODE: 
ROLL/YAW CSS PBI SW FAILS TO TRANSFER. 

IF CSS PBI SW FAILS OFF, USE THE OTHER CREW POSITION OR PLACE THE 
RHC OUT-OF-DETENT FOR MANUAL FCS CONTROL. NO AUTOLAND IS 
CONSIDERED AT THIS TIME. 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/20/87 
ASSESSMENT ID: GNC-201 

NASA FMEA #: 05-1-FC3 142-2 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: GNC 
MDAC ID: 201 
ITEM: THC 


LEAD ANALYST: TRAHAN, W. H. 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [ 3 /1R ] 

( P ] 

[ P ] 

[ P ] 

[ 

IOA [ 3 /1R ] 

[ P ] 

[ P ] 

t P 3 

[ 

COMPARE [ / ] 

[ ] 

[ ] 

C ] 

[ 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [ ] [ ] [ 3 t 3 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS ! 

IOA FAILURE MODE: LOSS OF ONE CHANNEL. 

FMEA FAILURE MODE: LOSS OF A CHANNEL-TRANSDUCER OR SWITCH 
FAILURE-OPEN. 

NO DIFFERENCES. 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 


3/20/87 

GNC-202 

05-1-FC3142-1 

GNC 

202 

THC 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


LEAD ANALYST: TRAHAN, W. H. 

ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY SCREENS 
ABC 


CIL 

ITEM 


NASA [ 2 /1R ] [ P ] [ P ] [ P ] 

IOA [ 2 /1R ] [ P ] [ P ] [ P ] 


[ X ] * 
[ X ] 


COMPARE [ / 


] 


RECOMMENDATIONS: (If different from NASA) 


[ / 3 [][][] [ ] 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ X ] 
INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: IMMOBILE THC. 

FMEA FAILURE MODE: PHYSICAL JAMMING-MECHANICAL LINKAGE FAILURE. 
NO DIFFERENCES . 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 


3/20/87 
GNC-203 
05-1-FC3 142-3 

GNC 

203 

THC 

TRAHAN, W. H. 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 


FLIGHT 






ITEM 


HDW/FUNC 

A 


B 


C 


NASA 

[ 3 /1R ] 

[ P ] 

[ 

P 

1 

[ P ] 

[ ] * 

IOA 

[ 2 /1R ] 

[ P ] 

[ 

P 

] 

[ P 3 

[ x ] 

COMPARE 

[ N / ] 

[ ] 

[ 


] 

[ 3 

[ N ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ / 1 

[ ] 

[ 


] 

[ ] 

[ ] 








(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If 

applicable) 



ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: ERRONEOUS OUTPUT. 

FMEA FAILURE MODE: ERRONEOUS OUTPUT, SHORTED SWITCH. 

MANUAL ET SEP REQUIRES A MANUAL- Z TRANSLATION MANEUVER. 

ADDITIONAL IOA ANALYSIS OF THIS FAILURE MODE CHANGED THE HARDWARE 
CRITICALITY TO 3, AGREEING WITH THE NASA FMEA. 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 

ASSESSMENT ID: GNC-301 

NASA FMEA #: 05-1-FC3442-1 

SUBSYSTEM: GNC 

MDAC ID: 301 

ITEM: RPTA 

LEAD ANALYST: LES DRAPELA 

ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 

FLIGHT ITEM 

HDW/FUNC ABC 

NASA [ 3 /1R ] [ P ] [ P ] [ P ] [ ] * 

IOA [ 3 /1R ] [ P ] [ P ] [ P ] [ ] 

COMPARE [ / ] [][][] [ ] 

RECOMMENDATIONS: (If different from NASA) 

[ / ] [][][] [ ] 


(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE ( ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: NO OUTPUT ON ONE CHANNEL. 

FMEA FAILURE MODE: LOSS OF OUTPUT - 1 CHANNEL. 

NO DIFFERENCES. 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 


1/23/87 
GNC-302 
05-1-FC3 442-2 

GNC 

302 

RPTA 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


LEAD ANALYST: LES DRAPE LA 

ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 3 /1R ] 

[ P ] 

[ P ] 

[ P ] 

[ ] * 

IOA 

[ 3 /1R ] 

[ P ] 

[ P 1 

[ P ] 

[ 1 

COMPARE 

[ / ] 

[ 

1 

C ] 

[ ] 

[ ] 

RECOMMENDATIONS : 

(If different 

from NASA) 



[ / ] 

[ 

] 

[ ] 

[ 3 

[ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: ERRONEOUS OUTPUT ON ONE CHANNEL. 

FMEA FAILURE MODE: ERRONEOUS OUTPUT. 

NO DIFFERENCES. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 12/23/86 


ASSESSMENT ID: GNC-303 

NASA FMEA #: NONE 

SUBSYSTEM: GNC 

MDAC ID: 303 

ITEM: RPTA 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


LEAD ANALYST: LES DRAPELA 

ASSESSMENT: 



CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 


FLIGHT 





ITEM 


HDW/FUNC 

A 

B 


C 


NASA 

C / ] 

t ] 

[ 

] 

[ ] 

C ] 

IOA 

[ 3 /1R ] 

t P 1 

[ P 

] 

[ P 3 

[ ] 

COMPARE 

[ N /N ] 

[ N ] 

[ N 

] 

[ N ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ 3 /1R ] 

[ P ] 

[ P 

] 

[ P ] 

[ ] 


(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: INADVERTENT OUTPUT ON ONE CHANNEL. 

NASA/RI DID NOT COVER THIS FAILURE MODE. IOA DOES RECOMMEND A 
FMEA BEING WRITTEN FOR COMPLETENESS. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 


12/23/86 

GNC-304 

05-1-FC3442-3 

GNC 

304 

RPTA 

LES DRAPELA 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[1/1 ] 

[ NA] 

[ NA] 

[ NA] 

[ X ] * 

IOA 

[ 2 /1R ] 

[ P ] 

[ P 3 

[ p ] 

[ x ] 

COMPARE 

[ N /N ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 

RECOMMENDATIONS : 

(If different 

from NASA) 



[ / ] 

C ] 

[ ] 

[ ] 

[ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ X ] 
INADEQUATE [ ] 

REMARKS ! 

IOA FAILURE MODE: LOSS OF ONE RPTA DUE TO MECHANICAL FAILURE 
FMEA FAILURE MODE: PHYSICAL JAMMING OF TRANSDUCER DRIVE OR 
LINKAGE FAILURE 

AFTER DISCUSSIONS WITH NASA AND FURTHER ANALYSIS, IOA AGREES WITH 
THE NASA CRITICALITY. SINCE RM IS PERFORMED ON EACH RPTA 
SEPARATELY BUT AT THE SAME TIME AND THEN THE LARGEST VALUE OF THE 
TWO SELECTED SIGNALS IS CHOSEN AS THE COMMAND, THE SIGNAL FROM 
THE JAMMED RPTA COULD BE SELECTED, IF IT IS GREATER THAN THE 
SIGNAL FROM THE OTHER RPTA. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 


1/23/87 

GNC-401 

05-1-FC3242-1 

GNC 

401 

SBTC 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


LEAD ANALYST: ROBERT O'DONNELL 

ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 

HDW/FUNC 

A 

B C 

ITEM 

NASA 

[ 2 /1R ] 

t P ] 

[ P ] C P ] 

[ X ] * 

IOA 

[ 2 /1R ] 

[ P ] 

[ P ] [ P ] 

C X ] 

COMPARE 

[ / 3 

[ ] 

[ ] [ ] 

C ] 

RECOMMENDATIONS : (If 

different 

from NASA) 



[ / ] 

[ ] 

C ] [ ) 

[ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE ( X ] 
INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: PHYSICAL BINDING/ JAMMING OF CNTL LEVER. 
FMEA FAILURE MODE: PHYSICAL JAMMING. 

NO DIFFERENCES. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 
ASSESSMENT ID: GNC-402 

NASA FMEA #: 05-1-FC3242-2 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: GNC 

MDAC ID: 402 

ITEM: SBTC 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 


FLIGHT 





ITEM 


HDW/FUNC 

A 

B 


C 


NASA 

[ 3 /1R ] 

[ P ] 

[ P 

] 

C P ] 

[ ] * 

IOA 

[ 3 /1R ] 

[ P ] 

[ P 

] 

[ p 3 

[ 1 

COMPARE 

[ / ] 

[ ] 

[ 

] 

C ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



( / ] 

C ] 

[ 

] 

[ ] 

C ] 







(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS * 

IOA FAILURE MODE: NO TRANSDUCER OUTPUT ON A CMD CHANNEL. 

FMEA FAILURE MODE: LOSS OF A CHANNEL-TRANSDUCER. 

NO DIFFERENCES. REFERENCE MDAC ID 404 REMARKS. RECOMMEND CHANGE 
TO FMEA FAILURE MODE: LOSS OF A CHANNEL - TRANSDUCER OR SWITCH. 


< 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 


1/23/87 

GNC-403 

05-1-FC3242-3 

GNC 

403 

SBTC 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


LEAD ANALYST: ROBERT O'DONNELL 

ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 

HDW/FUNC 

A 

B C 

ITEM 

NASA 

[ 3 /1R ] 

( P ] 

[ P ] [ P ] 

[ ] * 

IOA 

[ 3 /1R ] 

[ P ] 

[ P ] [ P ] 

t ] 

COMPARE 

[ / ] 

[ ] 

[ ] t ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from NASA) 



C / ] 

[ 3 

[ ] t ] 

[ ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: ERRONEOUS XDCR OUTPUT ON A CMD CHN. 

FMEA FAILURE MODE: ERRONEOUS OUTPUT OF ONE CHANNEL. 

NO DIFFERENCES. 

REFERENCE MDAC ID 405 REMARKS. RECOMMEND CHANGE TO FMEA FAILURE 
MODE: ERRONEOUS OUTPUT - TRANSDUCER OR SWITCH CHANNEL. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 
ASSESSMENT ID: GNC-404 
NASA FMEA #: NONE 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


SUBSYSTEM: GNC 

MDAC ID: 404 

ITEM: SBTC 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ / 

] 

t ] 

[ ] 

[ 3 

[ ] * 

IOA 

[ 3 /1R 

] 

t P ] 

[ P ] 

[ P ] 

C ] 

COMPARE 

[ N /N 

] 

[ N ] 

[ N ] 

[ N ] 

[ ] 

RECOMMENDATIONS : 

(If 

different from NASA) 



[ / 

] 

[ ] 

[ ] 

[ ] 

[ 1 




(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If 

applicable) 



ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: NO OUTPUT ON A TAKEOVER SW CHN. 

FMEA FAILURE MODE: NONE. 

NASA/RI DID NOT COVER THIS FAILURE MODE (NO OUTPUT ON A TAKEOVER 
SW CHN) . IOA RECOMMENDS THIS FAILURE MODE BE ADDED TO FMEA 05-1- 
FC3242-2 , CRITICALITY 3/1R. THE PRESENT FAILURE MODE COULD BE 
CHANGED TO "LOSS OF A CHANNEL - TRANSDUCER OR SWITCH". 

NO NEW FMEA RECOMMENDED, SINCE THE CRITICALITY OF THIS FAILURE 
MODE DOES NOT INCREASE THE EXISTING CRITICALITY OF THE ITEM. 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 


ASSESSMENT ID: GNC-405 

NASA FMEA #: NONE 

SUBSYSTEM: GNC 

MDAC ID: 405 

ITEM: SBTC 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


LEAD ANALYST: ROBERT O'DONNELL 

ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

C 


NASA 

[ / ] 

[ ] 

[ ] 

[ ] 

[ ] 

IOA 

[ 3 /1R ] 

[ P ] 

[ P ] 

[ P ] 

[ ] 

COMPARE 

[ N /N ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 

RECOMMENDATIONS : (If 

different from NASA) 



[ / ] [][][] [ ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: TAKEOVER SW CHN FAILS ON. 

FMEA FAILURE MODE: NONE. 

NASA/RI DID NOT COVER THIS FAILURE MODE (TAKEOVER SW CHN FAILS 
ON) . 

IOA RECOMMENDS THIS FAILURE MODE BE ADDED TO FMEA 05-1-FC3242-3 , 
CRITICALITY 3/1R. THE PRESENT FAILURE MODE COULD BE CHANGED TO 
"ERRONEOUS OUTPUT-TRANSDUCER OR SWITCH CHANNEL". 

NO NEW FMEA RECOMMENDED, SINCE THE CRITICALITY OF THIS FAILURE 
MODE DOES NOT INCREASE THE EXISTING CRITICALITY OF THE ITEM. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 
ASSESSMENT ID: GNC-406X 

NASA FMEA #: 


05-1-FC3242-4 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


GNC 

406 

SBTC 

ROBERT O'DONNELL 



CRITICALITY 

FLIGHT 

HDW/FUNC 

REDUNDANCY SCREENS 
ABC 

CIL 

ITEM 

NASA 

IOA 

[ 2 /1R ] 
[ 2 /1R ] 

[ P ] 
[ P 3 

[ P 3 
[ P 3 

[ P ] 
[ P ] 

[ x ] 
[ x ] 

COMPARE 

[ / ] 

[ ] 

[ 1 

[ 1 

[ ] 


RECOMMENDATIONS : 

[ / 3 


(If different from NASA) 

[ ] t ] t 


[ 1 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ X ] 
INADEQUATE [ ] 

REMARKS • 

IOA FAILURE MODE: PHYSICAL JAMMING OF TAKEOVER SWITCH. 

FMEA FAILURE MODE: PHYSICAL JAMMING OF MANUAL TAKEOVER SWITCH. 

NO DIFFERENCES • 

THE IOA DID NOT COVER THIS ITEM IN THE ORIGINAL ANALYSIS. IOA 
DID COVER TAKEOVER SW CHN FAILS ON (ASSESSMENT ID GNC-405) , AND 
NO OUTPUT ON A TAKEOVER SW CHN (ASSESSMENT ID GNC-404) . A NEW 
IOA ANALYSIS WAS PERFORMED AND AN ANALYSIS WORKSHEET 
(ID-406) PROVIDED. IOA AGREED WITH THE NASA/RI ASSESSMENT 
RECOMMENDATION . 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 
ASSESSMENT ID: GNC-410 

NASA FMEA #: 05-1-FC7251-0001 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

410 

SWITCH-SPD BK/THROT PBI 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS 



FLIGHT 

HDW/FUNC 

A 

B 

C 

• -*» -i-J 

ITEM 

NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ ] * 
[ ] 

IOA 

[ 3 /2R ] 

[ P ] 

[ P ] 

[ p ] 

COMPARE 

[ /N ] 

[ N ] 

[ N ] 

C N ] 

[ ] 


RECOMMENDATIONS: (If different from NASA) 


[ / 


[ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: 


REMARKS: 


(If applicable) 

ADEQUATE [ 
INADEQUATE [ 


] 

] 


IOA FAILURE MODE: SWITCH CONTACT FAILS CLOSED. 

FMEA FAILURE MODE: FAILS TO TRANSFER-SWITCH WILL NOT CHANGE 
STATE . 


DOWNGRADE SPD BK/THROT PBI AUTO SWITCH TO CRIT 3/3. SYSTEM 
NORMALLY IN AUTO UNLESS SYSTEM FAILURE REQUIRES MANUAL TAKEOVER 
BY THE SBTC TAKEOVER SWITCH. ONCE IN MANUAL MODE, CREW CAN 
REMAIN IN SBTC MANUAL CONTROL MODE WITH SOME INCREASE IN WORK 
IXDAD. THE SBTC TAKEOVER SW MUST BE HELD IN TO MAINTAIN MANUAL 
MODE. 

IOA DOES CONCUR WITH NASAs REEVALUATION AND RATIONALE. 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


1/23/87 

GNC-410A 

05-1-FC7251-0002 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

410 

SWITCH --SPD BK/THROT PBI 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

C 


NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ ] * 

IOA 

[ 3 /2R ] 

[ P ] 

[ P ] 

[ p ] 

( 1 

COMPARE 

[ /N ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ / ] 

[ ] 

[ ] 

[ ] 

[ ] 






(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS ! 

IOA FAILURE MODE: SWITCH CONTACT FAILS CLOSED. 

FMEA FAILURE MODE: INTERNAL SHORTS. 

DOWNGRADE SPD BK/THROT PBI AUTO SWITCH TO CRIT 3/3. SYSTEM 
NORMALLY IN AUTO UNLESS SYSTEM FAILURE REQUIRES MANUAL TAKEOVER 
BY THE SBTC TAKEOVER SWITCH. ONCE IN MANUAL MODE, CREW CAN 
REMAIN IN SBTC MANUAL CONTROL MODE WITH SOME INCREASE IN WORK 
LOAD. THE SBTC TAKEOVER SW MUST BE HELD IN TO MAINTAIN MANUAL 
MODE. 

IOA DOES CONCUR WITH NASAs REEVALUATION AND RATIONALE. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 
ASSESSMENT ID: GNC-411 
NASA FMEA #: 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


05-1-FC72 5 1-0001 

GNC 

411 

SWITCH-SPD BK/THROT PBI 
ROBERT O'DONNELL 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ ] 

IOA [ 3 /1R ] 

[ P ] 

[ P 3 

[ p ] 

[ ] 

COMPARE [ /N ] 

[ N ] 

[ N ] 

[ N ] 

[ 3 


RECOMMENDATIONS : 

[ / 


(If different from NASA) 

[ ] [ ] [ 


[ 3 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ) 

REMARKS: 

IOA FAILURE MODE: SWITCH CONTACT OR CURRENT LIMIT RESISTOR FAILS 
OPEN OR SHORTED TO GROUND. 

FMEA FAILURE MODE: FAILS TO TRANSFER-SW WILL NOT CHANGE STATE. 
DOWNGRADE SPD BK/THROT PBI AUTO SWITCH TO CRIT 3/3. SYSTEM 
NORMALLY IN AUTO UNLESS SYSTEM FAILURE REQUIRES MANUAL TAKEOVER 
BY THE SBTC TAKEOVER SWITCH. ONCE IN MANUAL MODE, CREW CAN 
REMAIN IN SBTC MANUAL CONTROL MODE WITH SOME INCREASE IN WORK 
LOAD. 

IOA DOES CONCUR WITH NASAs REEVALUATION AND RATIONALE. 


REPORT DATE 02/03/88 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/20/87 
ASSESSMENT ID: GNC-501 

NASA FMEA #: 05-1-GN21-2 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: GNC 
MDAC ID: 501 
ITEM: IMU 


LEAD ANALYST: J.M. HIOTT 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY SCREENS 
ABC 


NASA [ 2 /1R ] 
IOA [ 2 /1R ] 


[ P ] [ P ] t F ] 

[ P ] [ P ] [ F 1 


CIL 

ITEM 


[ X ] * 
[ X ] 


COMPARE [ / 


] 


RECOMMENDATIONS : 


(If different from NASA) 


[ / 


[ 


[ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ X ] 
INADEQUATE [ ] 


REMARKS: 

IOA FAILURE MODE: ERRONEOUS OUTPUT. 
FMEA FAILURE MODE: ERRONEOUS OUTPUT. 
NO DIFFERENCES. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/20/87 
ASSESSMENT ID: GNC-502 

NASA FMEA #: 05-1-GN21-1 


SUBSYSTEM: GNC 
MDAC ID: 502 
ITEM: I MU 


LEAD ANALYST: J.M. HIOTT 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 


CIL 

ITEM 


NASA [ 3 /1R ] [ P ] [ P ] [ F ] 

IOA [ 3 /1R ] [ P ] [ P ] [ F ] 


[ X ] * 

[ X ] 


COMPARE [ / 


] 


RECOMMENDATIONS : 

[ / 


(If different from NASA) 

[ ] [ ] [ 


[ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE 

INADEQUATE 

REMARKS: 

IOA FAILURE MODE: NO OUTPUT. 

FMEA FAILURE MODE: LOSS OF OUTPUT. 

NO DIFFERENCES. 


[ X ] 

t ] 


REPORT DATE 02/03/88 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


3/20/87 

GNC-510 

05-60-200201-1 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

510 

IMU POWER CIRCUIT 


LEAD ANALYST: J.M. HIOTT 

ASSESSMENT: 



CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 


FLIGHT 

HDW/FUNC 

A B 


C 

ITEM 

NASA 

[ 3 /1R ] 

[ P ] [ F 

] 

[ P ] 

[ X ] * 

IOA 

[ 3 /1R ] 

[ P ] [ P 

] 

C p ] 

[ 3 

COMPARE 

[ / ] 

[ ] C N 

] 

[ ] 

C N ] 

RECOMMENDATIONS : (If 

different from 

NASA) 



[ / 1 

[ ] [ 

1 

[ ] 

[ * ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: ONE BRANCH OF CIRCUIT FAILED OPEN. 

FMEA FAILURE MODE: FAIL OPEN, FAIL TO CONDUCT (DIODES) . 

FIRST FAILURE UNDETECTED BUT CURRENT STILL CONDUCTED TO THE IMU. 
THE SECOND FALIURE ON THE SAME IMU IS DETECTED IN FLIGHT. THE 
OUTPUT FROM THIS IMU WILL BE DISCARDED AND ANNUNCIATED BY RM. 
BECAUSE THE WORST CASE (2 FAILURES) PASSES ALL SCREENS, IOA 
RECOMMENDS ADDITIONAL CONSIDERATION BE GIVEN AS TO WEATHER OR NOT 
THIS IS A CIL ITEM. 

* DISPOSITION AND RATIONALE NOT AVAILABLE AT THE TIME OF THE 
ASSESSMENT. 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 


3/20/87 
GNC-510A 
05-60-IMU (03 ) 

GNC 

510 

IMU POWER CIRCUIT 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


LEAD ANALYST: W.H. TRAHAN 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 


CIL 

ITEM 


NASA [ 3 /1R ] [ P ] [ P ] [ P ] 

IOA [ 3 /1R ] [ P ] [ p ] [ P ] 


[ ] * 

[ ] 


COMPARE [ / 


] 


RECOMMENDATIONS: (If different from NASA) 

[ / 3 [][][] [ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: ONE BRANCH OF CIRCUIT FAILED OPEN. 

FMEA FAILURE MODE: OPEN, SHORT, OUT-OF-TOLERANCE (RESISTORS) . 
NO ACTION REQUIRED - RESULTS ARE THE SAME. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/20/87 
ASSESSMENT ID: GNC-510B 

NASA FMEA #: 05-60-IMU (04) 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

510 

IMU POWER CIRCUIT 


LEAD ANALYST: W.H. TRAHAN 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

FLIGHT 




HDW/FUNC 

A 

B 

c 

NASA [ 3 /1R ] 

[ P 3 

[ P 3 

[ p 3 

IOA [ 3 /1R ] 

[ P 3 

[ P 3 

[ p 3 

COMPARE [ / ] 

[ 3 

[ 3 

[ 3 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [][]£] 


CIL 

ITEM 


[ 3 * 

[ ] 

[ 3 


[ 3 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

remarks ! 

IOA FAILURE MODE: ONE BRANCH OF CURCUIT FAILED OPEN. 

FMEA FAILURE MODE: LOSS OF OUTPUT, FAILS TO CONDUCT, OPENS, 
PREMATURE OPERATION (RPC) . 

NO ACTION REQUIRED - RESULTS ARE THE SAME. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 


3/20/87 

GNC-511 

05-60-200200-1 

GNC 

511 

IMU POWER CIRCUIT 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


LEAD ANALYST: J.M. HIOTT 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 


CIL 

ITEM 


NASA [ 3 /1R ] [ P ] [ P ] [ P ] 

IOA [ 3 /1R ] [ P ] [ P ] [ P ] 


[ ] * 

[ ] 


COMPARE [ / 


] 


RECOMMENDATIONS : 

[ / 


(If different from NASA) 

[ ] [ ] [ 


[ 3 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: POWER CIRCUIT FAILS OPEN. 

FMEA FAILURE MODE: SWITCH - OPEN, SHORTS, FAIL TO TRANSFER FROM 
OFF. 

NO ACTION REQUIRED - RESULTS ARE THE SAME. 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


3/20/87 

GNC-512 

05-60-200200-2 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

512 

IMU POWER CIRCUIT 


LEAD ANALYST: J.M. HIOTT 

ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 


C 

ITEM 

NASA 

(3/3 ] 

[ NA] [ 

NA] 

[ 

NA] 

[ ] * 

IOA 

[3/3 ] 

[ NA] [ 

NA] 

[ 

NA] 

[ ] 

COMPARE 

[ / 3 

t ] t 

] 

[ 

] 

[ ] 

RECOMMENDATIONS : 

(If different 

from 

NASA) 




[ / 1 

( ] [ 

] 

[ 

] 

[ ] 




(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS s 

IOA FAILURE MODE: ONE CIRCUIT FAILED CLOSED. 

FMEA FAILURE MODE: SWITCH SHORT (CONTACT TO CONTACT) , PREMATURE 
OPERATIONS . 

NO ACTION REQUIRED. 


REPORT DATE 02/03/88 


C-57 


APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 12/23/86 
ASSESSMENT ID: GNC-601 

NASA FMEA #: 05-1-GN22-1 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

601 

STAR TRACKER 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


LEAD ANALYST: LES DRAPE LA 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 


FLIGHT 






ITEM 


HDW/FUNC 

A 

B 



c 


NASA 

[ 3 /1R ] 

[ P 3 

C P 

3 

[ 

p 3 

[ 3 

IOA 

[ 3 /1R ] 

[ P 3 

[ p 

3 

[ 

P 3 

[ 3 

COMPARE 

[ / ] 

[ 3 

[ 

3 

[ 

3 

[ 3 

RECOMMENDATIONS : (If 

different 

from 

NASA) 




C / ] 

[ 3 

[ 

3 

c 

3 

[ 3 


(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: NO OUTPUT. 

FMEA FAILURE MODE: LOSS OF OUTPUT. 

NO DIFFERENCES. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 


12/23/86 

GNC-601A 

05-1-GN22-4 

GNC 

601 

STAR TRACKER 
LES DRAPELA 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 

FLIGHT ITEM 

HDW/FUNC ABC 

NASA [ 3 /1R ] [ P ] [P] [P] [ ]* 

IOA [ 3 /1R ] [P] [P] [P] [] 

COMPARE [ / ] [][][] [ ] 

RECOMMENDATIONS: (If different from NASA) 

[ / ] [ 1 [ ] C ] C ] 


(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: NO OUTPUT. 

FMEA FAILURE MODE: MECHANICAL SHUTTER FAILED CLOSED. 

NO DIFFERENCES. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


12/23/86 

GNC-602 

NONE 

GNC 

602 

STAR TRACKER 
LES DRAPELA 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 



CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 


FLIGHT 





ITEM 


HDW/FUNC 

A 

B 


c 


NASA 

[ / ] 

[ ] 

[ 

3 

[ 3 

C 3 

IOA 

[ 3 /1R ] 

[ P ] 

[ P 

] 

[ p 3 

[ 3 

COMPARE 

[ N /N ] 

[ N ] 

( N 

] 

[ N ] 

[ 3 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ 3 /1R ] 

t P ] 

[ P 

3 

[ P 3 

[ 3 


(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: ERRONEOUS OUTPUT. 

NASA/RI DID NOT COVER THIS FAILURE MODE. IOA DOES RECOMMEND A 
FMEA BEING WRITTEN FOR COMPLETENESS. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 


GNC-603X 

05-1-GN22-2 

GNC 

603 

STAR TRACKER 
LES DRAPELA 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

C 


NASA 

[ 3 /1R ] 

[ P ] 

[ P 3 

[ P ] 

[ 3 * 

IOA 

[ 3 /1R ] 

[ P 1 

[ P ] 

C p ] 

[ 3 

COMPARE 

[ / 3 

[ ] 

[ ] 

[ 1 

[ 3 


RECOMMENDATIONS : 

[ / 


(If different from NASA) 

[ ] [ ] [ 


[ 3 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 


REMARKS 5 

IOA FAILURE MODE: LOSS OF INPUT. 
FMEA FAILURE MODE: LOSS OF INPUT. 
NO DIFFERENCES. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


GNC-604X 

05-1-GN22-3 

GNC 

604 

STAR TRACKER 
LES DRAPE LA 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 


NASA [ 3 /1R ] [ P ] [ P ] [ P ] 

IOA [ 3 /1R ] [ p ] [ P ] [ P ] 


COMPARE 


/ 


3 


CIL 

ITEM 


[ 3 * 

[ 3 

[ 3 


RECOMMENDATIONS : 

[ / 


(If different from NASA) 

[ 3 [ ] [ 


[ 3 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: 
REMARKS: 


(If applicable) 

ADEQUATE [ 
INADEQUATE [ 


IOA FAILURE MODE: MECHANICAL SHUTTER FAILS OPEN. 
FMEA FAILURE MODE: MECHANICAL SHUTTER FAILS OPEN. 
NO DIFFERENCES. 


3 

3 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 12/23/86 
ASSESSMENT ID: GNC-610 

NASA FMEA #: NONE 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

610 

CIRCUIT-STAR TRACKER POWER 


LEAD ANALYST: LES DRAPELA 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

C 


NASA 

[ / 3 

[ 3 

[ 3 

[ 3 

[ 3 * 

IOA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ 3 

COMPARE 

[ N /N ] 

[ N ] 

[ N ] 

[ N ] 

[ 3 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ 3 






(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS I 

IOA FAILURE MODE: CIRCUIT BREAKER OR SWITCH FAILS CLOSED. 
NASA/RI DID NOT COVER THIS FAILURE MODE. IOA DOES RECOMMEND A 
FMEA BEING WRITTEN FOR COMPLETENESS. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


12/23/86 

GNC-611 

05-60-200100-1 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

611 

CIRCUIT-STAR TRACKER POWER 


LEAD ANALYST: LES DRAPE LA 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

C 


NASA 

[ 3 /1R ] 

[ P ] 

[ P ] 

[ P ] 

[ 

IOA 

[ 3 /1R ] 

[ P ] 

[ P ] 

[ P 3 

[ 

[PARE 

[ / ] 

[ ] 

[ 1 

C ] 

[ 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [][][] [ ] 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: FAILS OPEN. 

FMEA FAILURE MODE: ALL CREDIBLE MODES (LOSS OF OUTPUT, SHORTS, 
PREMATURE POWER) 

NO DIFFERENCES. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


12/23/86 

GNC-612 

05-60-200100-1 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

612 

CIRCUIT-STAR TRACKER POWER 


LEAD ANALYST: LES DRAPELA 


ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 


B 


C 

ITEM 

NASA 

[ 3 /1R ] 

[ P 

] [ 

P ] 

[ 

P ] 

[ ] * 

IOA 

[ 3 /1R ] 

[ P 

] C 

P ] 

[ 

P 1 

[ ] 

COMPARE 

[ / ] 

[ 

] [ 

] 

[ 

] 

[ ] 

RECOMMENDATIONS : 

(If different 

from 

NASA) 




[ / ] 

[ 

] [ 

] 

[ 

] 

[ ] 






(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS • 

IOA FAILURE MODE: SWITCH SHORTS TO GROUND. 

FMEA FAILURE MODE: ALL CREDIBLE MODES (LOSS OF OUTPUT, SHORTS, 
PREMATURE POWER) 

NO DIFFERENCES. 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 12/23/86 

ASSESSMENT ID: GNC-701 

NASA FMEA #: 07-1-725101-3 

SUBSYSTEM: GNC 

MDAC ID: 701 

ITEM: COAS 

LEAD ANALYST: LES DRAPELA 

ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 

NASA [ 3 /1R ] [ P ] [ P ] [ P ] 

IOA [ 3 /3 ] [ NA] [ NA] [ NA] 

COMPARE [ /N ] [ N ] [ N ] [ N ] 


RECOMMENDATIONS: (If different from NASA) 

t / ] [][][] [ ] 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: COAS LIGHT OUT. 

FMEA FAILURE MODE: LOSS OF RETICLE ILLUMINATION (BULB FAILS TO 
LIGHT, DIMMER FAILS) . 

AFTER DISCUSSIONS WITH NASA, IOA AGREES WITH THE NASA 
CRITICALITY. 


CIL 

ITEM 


[ ] * 

[ ] 

[ ] 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 12/23/86 
ASSESSMENT ID: GNC-702 

NASA FMEA #: NONE 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


SUBSYSTEM: GNC 

MDAC ID: 702 

ITEM: COAS 


LEAD ANALYST: LES DRAPE LA 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

c 


NASA ( / ] 

[ ] 

[ 3 

[ 3 

[ 

IOA [ 3 /1R ] 

[ P 3 

[ p ] 

[ p 3 

[ 

COMPARE [ N /N ] 

( N ] 

[ N ] 

[ n ] 

[ 


RECOMMENDATIONS: (If different from NASA) 

[ 3 /1R ] [P] [P] [P] [] 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: RETICLE BROKEN. 

NASA/RI DID NOT COVER THIS FAILURE MODE. IOA DOES RECOMMEND A 
FMEA BEING WRITTEN FOR COMPLETENESS. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


12/23/86 

GNC-703X 

07-1-725101-1 

GNC 

703 

COAS 

LES DRAPE LA 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 


CIL 

ITEM 


NASA [ 3 /1R ] [ P ] [ P ] [ P ] 

IOA [ 3 /1R ] [ P ] [ P ] [ P ] 


[ ] * 

[ ] 


COMPARE [ / 


] 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [][][] [ ) 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: INCORRECT MOUNTING OR UNABLE TO MOUNT. 
FMEA FAILURE MODE: INCORRECT MOUNTING OR UNABLE TO MOUNT. 
NO DIFFERENCES. 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 12/23/86 
ASSESSMENT ID: GNC-710 

NASA FMEA #: NONE 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

710 

CIRCUIT - COAS POWER 


LEAD ANALYST: LES DRAPE LA 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

C 


NASA 

[ / 3 

[ 3 

[ 3 

[ 3 

[ 3 * 

IOA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ 3 

COMPARE 

[ N /N ] 

[ N ] 

[ N ] 

[ N ] 

[ 3 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ 3 






(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: CIRCUIT BREAKER OR SWITCH FAILS CLOSED. 
NASA/RI DID NOT COVER THIS FAILURE MODE. IOA DOES RECOMMEND A 
FMEA BEING WRITTEN FOR COMPLETENESS. 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


12/23/86 
GNC-711 
05-6Y-2 02 000-1 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

711 

CIRCUIT - COAS POWER 


LEAD ANALYST: LES DRAPELA 

ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

C 


NASA 

[ 3 /1R ] 

[ P ] 

[ P ] 

[ P ] 

[ 3 * 

IOA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ ] 

COMPARE 

[ /N ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ / ] 

[ ] 

[ 1 

[ ] 

[ ] 






(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: SWITCH FAILS OPEN. 

FMEA FAILURE MODE: ALL CREDIBLE MODES (LOSS OF POWER, OPENS, 
SHORTS, INADVERTENT OUTPUT) . 

AFTER DISCUSSIONS WITH NASA AND FURTHER ANALYSIS, IOA AGREES WITH 
THE NASA CRITICALITY. 


REPORT DATE 02/03/88 


C-70 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 12/23/86 
ASSESSMENT ID: GNC-712 

NASA FMEA #: 


05-6Y-202000-1 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


GNC 

712 

CIRCUIT - COAS POWER 
LES DRAPELA 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

c 


NASA [ 3 /1R ] 

[ P ] 

[ P 3 

[ p ] 

[ 3 

IOA [3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ 3 

COMPARE [ /N ] 

[ N ] 

[ N ] 

[ N ] 

[ 3 


RECOMMENDATIONS : 

[ / ] 


(If different from NASA) 

[ 3 C ] t 


[ ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS l 

IOA FAILURE MODE: CIRCUIT BREAKER FAILS OFF. 

FMEA FAILURE MODE: ALL CREDIBLE MODES (LOSS OF POWER, OPENS, 
SHORTS , INADVERTENT OUTPUT) . 

AFTER DISCUSSIONS WITH NASA AND FURTHER ANALYSIS, IOA AGREES WITH 
THE NASA CRITICALITY. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/20/87 
ASSESSMENT ID: GNC-801 

NASA FMEA #: 05-1-GN28-2 


SUBSYSTEM: GNC 

MDAC ID: 801 

ITEM: ADTA 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


LEAD ANALYST: J.M. HIOTT 

ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

( 3 /1R ] 

[ P ] 

[ P ] 

[ P ] 

[ ] 
[ ] 

IOA 

[ 3 /1R ] 

[ P ] 

[ P ] 

t P ] 

COMPARE 

[ / ] 

[ ] 

[ ] 

[ ] 

[ ] 


RECOMMENDATIONS: (If different from NASA) 


t / 3 [][][] [ ] 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ 1 

REMARKS: 

IOA FAILURE MODE: ERRONEOUS OUTPUT. 

FMEA FAILURE MODE: ERRONEOUS OUTPUT. 

NO DIFFERENCES. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/20/87 
ASSESSMENT ID: GNC-802 

NASA FMEA #: 05-1-GN28-1 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: GNC 

MDAC ID: 802 

ITEM: ADTA 


LEAD ANALYST: J.M. HIOTT 


ASSESSMENT : 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 

NASA 

FLIGHT 

HDW/FUNC 

[ 3 /1R ] 

A 

[ P ] 

B 

[ P ] 

C 

[ P 3 

ITEM 

[ 

t 

IOA 

[ 3 /1R ] 

[ P ] 

[ P ] 

[ P ] 


COMPARE [ / 


] 


RECOMMENDATIONS : 


(If different from NASA) 


[ / 


t 


[ 1 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 


REMARKS S 

IOA FAILURE MODE: NO OUTPUT. 

FMEA FAILURE MODE: IOSS OF OUTPUT. 
NO DIFFERENCES. 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 


3/20/87 

GNC-810 

05-60-GN0801-1 

GNC 

810 

ADTA POWER CIRCUIT 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


LEAD ANALYST: J.M. HIOTT 


ASSESSMENT: 


NASA 

IOA 


CRITICALITY 

FLIGHT 

HDW/FUNC 

[ 3 /1R ] 

[ 3 /1R ] 


COMPARE [ / ] 


REDUNDANCY SCREENS 


[ P ] 
[ P ] 

[ ] 


B 

[ P ] 
[ P ] 

[ ] 


[ P 3 
[ P ] 

[ ] 


CIL 

ITEM 


] * 

] 


[ ] 


RECOMMENDATIONS : 

[ / 


(If different from NASA) 

l 3 C ] [ 


[ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: J 

IOA FAILURE MODE: CIRCUIT FAILED OPEN. 

FMEA FAILURE MODE: CIRCUIT BREAKER-ALL CREDIBLE MODES OPENS 
CLOSES, PREMATURE OPERATION, SHORTS. 

NO ACTION REQUIRED - RESULTS ARE THE SAME. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/23/87 NASA DATA: 

ASSESSMENT ID: GNC-811 BASELINE [ ] 

NASA FMEA #: 05-60-GN0801-1 NEW [ X ] 

SUBSYSTEM: GNC 

MDAC ID: 811 

ITEM: ADTA POWER CIRCUIT 

LEAD ANALYST: J.M-. HIOTT 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

c 


NASA 

[ 3 /1R ] 

[ P ] 

[ P 3 

[ p ] 

( ] * 

IOA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ ] 

COMPARE 

[ /N ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ / ] 

[ 1 

[ 3 

[ ] 

[ ] 






(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS l 

IOA FAILURE MODE: CIRCUIT FAILED CLOSED. 

FMEA FAILURE MODE: CIRCUIT BREAKER-ALL CREDIBLE MODES, OPENS, 
CLOSES, PREMATURE OPERATION, SHORTS. 

NO ACTION REQUIRED - FMEA DEFINES A HIGHER CRITICALITY. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 


3/23/87 

GNC-812 

05-60-GN0802-1 

GNC 

812 

ADTA POWER CIRCUIT 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


LEAD ANALYST: J.M. HIOTT 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

c 


NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ 

IOA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ 

COMPARE 

[ / ] 

[ 3 

[ 3 

[ 3 

[ 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ / ] 

[ 3 

[ 3 

[ 3 

[ 


(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: RESISTOR (RLR07C5101GR) SHORTS TO GROUND OR 
OPENS . 

FMEA FAILURE MODE: ALL CREDIBLE MODES - OPENS, OUT OF TOLERANCE, 
SHORTED TO GROUND. 

NO DIFFERENCES. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


3/20/87 

GNC-901 

05-1-FC1042-1 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: GNC 
MDAC ID: 901 
ITEM: RGA 


LEAD ANALYST: TRAHAN, W. H. 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC A B 


NASA [ 3 /1R ] 
IOA [ 3 /1R ] 


[ P ] [ P ] C P ] 

[ p ] t P ] C p ] 


CIL 

ITEM 


[ ] * 

[ ] 


COMPARE [ / 


] 


RECOMMENDATIONS : 


(If different from NASA) 


[ / 


[ 


[ 1 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE ( ] 

INADEQUATE [ ] 


REMARKS t 

IOA FAILURE MODE: LOSS OF OUTPUT. 

FMEA FAILURE MODE: LOSS OF OUTPUT. ov dm 

FIRST FAILURE WILL BE DETECTED AND THE OUTPUT DISCARDED BY RM. 
SECOND FAILURE MAY NOT BE ANNUNCIATED, BUT MCC CAN DETECT. 
FLIGHT RULES DICTATES PRIORITY FLIGHT FOR THE LOSS OF ONE RGA. 
MAY IMPACT MISSION. REDUNDANCY OF FOUR RGA'S. 

NO DIFFERENCES. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/20/87 
ASSESSMENT ID: GNC-902 

NASA FMEA #: 05-1-FC1042-2 


SUBSYSTEM: GNC 
MDAC ID: 902 
ITEM: RGA 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


LEAD ANALYST: TRAHAN, W. H. 

ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS 



FLIGHT 

HDW/FUNC 

A 

B 



C 

ITEM 

NASA 

( 2 /1R ] 

[ P ] 

C F 

] 

[ 

P ] 

C X ] * 
[ ] 

IOA 

[ 3 /1R ] 

[ P ] 

[ P 

] 

[ 

P ] 

COMPARE 

[ N / ] 

[ ] 

[ N 

] 

[ 

] 

[ N ] 

RECOMMENDATIONS : 

(If different 

from 

NASA) 




[ / ] 

[ ] 

( 

] 

[ 

] 

[ ] 


(ADD/ DELETE) 


* CIL RETENTION RATIONALE: 


REMARKS: 


(If applicable) 

ADEQUATE 

INADEQUATE 


[ X ] 
[ ] 


IOA FAILURE MODE: ERRONEOUS OUTPUT. 

FMEA FAILURE MODE: ERRONEOUS OUTPUT. 

FIRST FAILURE WILL BE DETECTED AND THE OUTPUTS DISCARDED BY RM 
THE SECOND FAILURE MAY NOT BE ANNUNCIATED, BUT THE MCC CAN 
DETECT. FLIGHT RULES INVOKE PRIORITY FLIGHT ON THE FIRST 
FAILURE. MAY IMPACT MISSION. REDUNDANCY OF FOUR RGA. 

ADDITIONAL IOA ANALYSIS CHANGED THE HARDWARE CRITICALITY TO 2 AND 
FAILED THE B SCREEN. THIS RESULTS IN NO DIFFERENCE WITH NASA 
FMEA FOR THE WORST CASE WHERE THE ERRONEOUS OUTPUT IS BELOW THE 
RM TRIP LEVEL. 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


3/20/87 

GNC-903 

05-60-FC1043-0001 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

903 

PWR SW RGA 1,2, 3, 4 


LEAD ANALYST: TRAHAN, W. H. 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 


FLIGHT 

HDW/FUNC 

A 

B 


C 

ITEM 

NASA 

[ 3 /1R ] 

[ P ] [ 

P 

] 

[ P ] 

C ] * 

IOA 

[ 3 /1R ) 

( P ] [ 

P 

] 

t P ] 

[ ] 

COMPARE 

( / ] 

[ ] c 


] 

[ ] 

[ ] 

RECOMMENDATIONS : (If 

[ / ] 

different 
( ] [ 

from 

] 

NASA) 

C ] 

C ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: FAILS ON, FAIL OFF. 

FMEA FAILURE MODE: PREMATURE OPERATION-INADVERTENTLY OPENS, 

SHORT TO GROUND, INTERNAL SHORT. 

SWITCHES 1 AND 4 ARE REDUNDANTLY POWERED. 

NO DIFFERENCES. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/20/87 NASA DATA: 

ASSESSMENT ID: GNC-904 BASELINE [ ] 

NASA FMEA #: 05-60-200301-1 NEW [ X ] 

SUBSYSTEM: GNC 

MDAC ID: 904 

ITEM: DIODES & RESIST (ORB) 

LEAD ANALYST: TRAHAN, W. H. 

ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [ 3 /1R ] 

[ P ] 

[ F ] 

[ P ] 

[ X ] 

IOA [ 3 /1R ] 

[ P ] 

[ P ] 

[ P ] 

[ ] 

COMPARE [ / ] 

[ ] 

[ N ] 

[ 3 

( N ] 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [ ] [ ] [I [ * ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ j 

REMARKS: 

IOA FAILURE MODE: OPEN, FAIL TO CONDUCT. 

FMEA FAILURE MODE: (DIODES ONLY) OPEN (ELECTRICAL) -FAILS OPEN, 

FAIL TO CONDUCT. 

FIRST FAILURE UNDETECTED BUT CURRENT STILL CONDUCTED TO THE 
RGA'S. THE SECOND FAILURE ON THE SAME RGA IS DETECTABLE IN 
FLIGHT. THE OUTPUT FROM THIS RGA WILL BE DISCARDED AND 
ANNUNCIATED BY RM. FLIGHT RULES DICTATES PRIORITY FLIGHT FOR THE 
LOSS OF ONE 

RGA. BECAUSE THE WORST CASE (2 FAILURES) PASSES ALL SCREENS, IOA 
RECOMMENDS ADDITIONAL CONSIDERATION BE GIVEN AS TO WEATHER OR NOT 
THIS BECOMES A CIL ITEM. 

* DISPOSITION AND RATIONALE NOT AVAILABLE AT THE TIME OF THE 
ASSESSMENT. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


3/20/87 

GNC-904A 

05-6 0-FC1044 -0001 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

904 

DIODES & RESIST (ORB) 


LEAD ANALYST: TRAHAN, W. H. 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC A B 


NASA [ 3 /1R ] 
IOA [ 3 /1R ] 


[ P ] [ P ] [ P 3 

( P ] [ P ] [ p ] 


COMPARE 


/ 


] 


CIL 

ITEM 


[ 3 * 

[ 1 

[ ] 


RECOMMENDATIONS: (If different from NASA) 

[ / ] t 3 t ] C 


[ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 


REMARKS: 

IOA FAILURE MODE: OPEN, FAIL TO CONDUCT. 

FMEA FAILURE MODE: (RESISTOR) OPEN, SHORTS, 

rGA'S 1 AND 4 ARE REDUNDANTLY POWERED. 

NO DIFFERENCES. 


HIGH RESISTANCE. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


3/20/87 

GNC-905 

05-60-FC1042-0001 

GNC 

905 

RPC'S (ORB) 
TRAHAN, W. H. 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


CRITICALITY REDUNDANCY SCREENS 



FLIGHT 

HDW/FUNC 

A 

B 

C 

VJ.JJ 

ITEM 

NASA 

[ 3 /1R ] 

[ P ] 

[ P ] 

[ P ] 
[ P ] 

C ] * 
C ] 

IOA 

[ 3 /1R ] 

[ P ] 

[ P ] 

COMPARE 

[ / ] 

[ 3 

[ ] 

[ ] 

[ ] 


RECOMMENDATIONS: (If different from NASA) 


C / 3 £][][] [ ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: 
REMARKS: 


(If applicable) 

ADEQUATE 

INADEQUATE 


IOA FAILURE MODE: FAILS ON, FAILS OFF. (RGA) 

FMEA FAILURE MODE: LOSS OF OUTPUT-FAIL TO CONDUCT 

PREMATURE OPERATIONS. (RGA) 

RGA 1 AND 4 ARE REDUNDANTLY POWERED. 

NO DIFFERENCES. 


[ ] 
C ] 


OPENS , 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 12/23/86 
ASSESSMENT ID: GNC-950 

NASA FMEA #: 05-l-(09), PREL REF NO. 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 


GNC 

950 

RGA (SRB) 
LES DRAPE LA 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 

FLIGHT ITEM 

HDW/FUNC ABC 

NASA [ 3 /1R ] [P] [P] [P] [ ]* 

IOA [ 3 /1R ] [P] [P] [P] [] 

COMPARE [ / ] [][][] [ ] 

RECOMMENDATIONS: (If different from NASA) 

[ / ] [ 1 [ ] [ 3 [ ] 


(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: LOSS OF OUTPUT. 

FMEA FAILURE MODE: LOSS OF OUTPUT. 

NO DIFFERENCES. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 12/23/86 
ASSESSMENT ID: GNC-951 

NASA FMEA #: 05-01-(10), PREL REF NO. 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

951 

RGA (SRB) 


LEAD ANALYST: LES DRAPE LA 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 


FLIGHT 

HDW/FUNC 

A 

B 



C 

ITEM 

NASA 

[ 2 /1R ] 

[ P ] 

[ F 

] 

[ 

P ] 

[ X ] * 

IOA 

[ 3 /1R ] 

[ P ] 

[ P 

] 

[ 

P 3 

[ ] 

COMPARE 

[ N / ] 

[ ] 

[ N 

] 

[ 

] 

[ N ] 

RECOMMENDATIONS : (If 

different from 

NASA) 




[ / ] 

[ ] 

[ 

1 

[ 

] 

[ ] 








(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If 

applicable) 

n nw/M 

rm mn r i 


ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: ERRONEOUS OUTPUT. 

FMEA FAILURE MODE: ERRONEOUS OUTPUT. 

AFTER DISCUSSIONS WITH NASA AND FURTHER ANALYSIS, IOA AGREES WITH 
THE NASA CRITICALITY. FOR MOST CASES, ERRONEOUS ERRORS WILL BE 
DETECTED BY FDIR. FOR A WORST CASE SCENARIO IN WHICH THE ERROR 
IS BELOW THE FDIR THRESHOLD VALUE, THE ERROR WILL NOT BE 
DETECTED AND THE ERRONEOUS DATA WILL BE SENT TO THE SELECTION 
FILTER WHERE IT COULD BE SELECTED. 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 12/23/86 
ASSESSMENT ID: GNC-960 

NASA FMEA #: 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

960 

CIRCUIT - SRB RGA POWER 


LEAD ANALYST: LES DRAPELA 

ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

C 


NASA 

[ / 3 

[ ] 

[ ] 

[ ] 

[ ] 

IOA 

[ 3 /1R ] 

[ P ] 

[ P ] 

[ P ] 

[ ] 

COMPARE 

[ N /N ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 


RECOMMENDATIONS 

[ / 

* CIL RETENTION 
REMARKS: 


(If different from NASA) 

] [][][] [ 1 % 

(ADD/DELETE) 

RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 12/23/86 
ASSESSMENT ID: GNC-961 

NASA FMEA #: 


NASA DATA: 
BASELINE [ 
NEW [ 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

961 

CIRCUIT - SRB RGA POWER 


] 

] 


LEAD ANALYST: LES DRAPE LA 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

c 


NASA 

[ / ] 

[ ] 

[ 3 

[ 3 

[ ] 

IOA 

[3/3 ) 

[ NA] 

[ NA] 

[ NA] 

[ 3 

COMPARE 

[ N /N ] 

[ N ] 

[ N ] 

[ N ] 

[ 3 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ / ] 

[ 3 

[ 3 

[ 3 

[ 3 


(ADD/DELETE) 


* CIL RETENTION RATIONALE: 
REMARKS: 


(If applicable) 

ADEQUATE [ 
INADEQUATE [ 


] 

] 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


12/23/86 

GNC-1001 

05-1-FC2042-1 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1001 

ACCELEROMETER ASSEMBLY 


LEAD ANALYST: LES DRAPELA 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

C 


NASA 

[ 3 /1R ] 

[ P ] 

[ P ] 

[ P ] 

[ 

IOA 

[ 3 /1R ] 

[ P ] 

[ P ] 

[ P ] 

[ 

COMPARE 

[ / 1 

[ 3 

[ ] 

[ ] 

[ 


RECOMMENDATIONS : 


(If different from NASA) 


[ / 


[ 


[ ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 


REMARKS ! 

IOA FAILURE MODE: NO OUTPUT. 

FMEA FAILURE MODE: LOSS OF OUTPUT. 
NO DIFFERENCES. 


REPORT DATE 02/03/88 


C-87 


APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 12/23/86 
ASSESSMENT ID: GNC-1002 

NASA FMEA #: 05-1-FC2042-2 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1002 

ACCELEROMETER ASSEMBLY 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


LEAD ANALYST: LES DRAPELA 


ASSESSMENT: 



CRITICALITY 


REDUNDANCY SCREENS 

CIL 


FLIGHT 

HDW/FUNC 


A 

B 

C 

ITEM 

NASA 

[ 2 /1R ] 

c 

P ] 

[ F 3 

C P 3 

[ X ] * 

IOA 

[ 3 /1R ] 

[ 

p 3 

[ P 3 

[ P 3 

[ 3 

COMPARE 

[ N / ] 

[ 

3 

[ N ] 

[ 3 

[ N ] 

RECOMMENDATIONS : (If 

different from NASA) 



[ / ] 

[ 

3 

[ 3 

C 3 

[ 3 







(ADD/ DELETE) 

* CIL RETENTION RATIONALE 

: (If 

applicable) 

* rvn/M 

'T» mm r i 


ADEQUATE [ X ] 
INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: ERRONEOUS OUTPUT. 

FMEA FAILURE MODE: ERRONEOUS OUTPUT. 

AFTER DISCUSSIONS WITH NASA AND FURTHER ANALYSIS, IOA AGREES WITH 
THE NASA CRITICALITY. FOR MOST CASES ERRONEOUS ERRORS WILL BE 
DETECTED BY FDIR. FOR A WORST CASE SCENARIO IN WHICH THE ERROR 
IS BELOW THE FDIR THRESHOLD VALUE, THE ERROR WILL NOT BE 
DETECTED AND THE ERRONEOUS DATA WILL BE SENT TO THE SELECTION 
FILTER WHERE IT COULD BE SELECTED. 


REPORT DATE 02/03/88 


C-88 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


12/23/86 

GNC-1010 

0 5-6 0-FC104 5-0001 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1010 

CIRCUIT-AA'S 1 & 2 POWER 


LEAD ANALYST: LES DRAPELA 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

c 


NASA 

[ 3 /1R ] 

( P ] 

[ P ] 

[ p ] 

[ 3 * 

IOA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ 3 

COMPARE 

[ /N ] 

[ N ] 

[ N ] 

[ N ] 

[ 3 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ / ] 

t ] 

[ ] 

[ 3 

[ 3 






(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS i 

IOA FAILURE MODE: POWER CIRCUIT (AA'S 1&2) FAILS CLOSED. 

FMEA FAILURE MODE: CIRCUIT BREAKER FAILS OPEN, FAILS CLOSED. 

THE FMEA COVERED TWO FAILURE MODES, BUT IOA AGREES WITH THE 
HIGHEST CRITICALITY WHICH IS FOR THE "FAILED OPEN" CASE. NO 
ADDITIONAL FMEA IS RECOMMENDED. 


REPORT DATE 02/03/88 


C-89 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


12/23/86 

GNC-1011 

05-6 0-FC104 5-0001 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1011 

CIRCUIT-AA ' S 1 & 2 POWER 


LEAD ANALYST: LES DRAPELA 

ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 


CIL 

ITEM 


NASA [ 3 /1R ] [ P ] [ P ] [ P ] 

IOA [ 3 /1R ] [ P ] [ P ] [ P ] 


C ] * 

C ] 


COMPARE [ / 


] 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [][][] [ ] 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: POWER CIRCUIT (AA'S 1&2) FAILS OPEN. 

FMEA FAILURE MODE: CIRCUIT BREAKER FAILS OPEN, FAILS CLOSED. 

THE FMEA COVERED TWO FAILURE MOES, BUT IOA AGREES WITH THE 
HIGHEST CRITICALITY WHICH IS FOR THE "FAILED OPEN" CASE. NO 
ADDITIONAL FMEA IS RECOMMENDED. 


REPORT DATE 02/03/88 


C-90 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 12/23/86 
ASSESSMENT ID: GNC-1012 

NASA FMEA #: 05-60-(03), PREL REF NO. 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1012 

CIRCUIT-AA'S 3 & 4 POWER 


LEAD ANALYST: LES DRAPELA 


ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 

NASA [ 3 /1R ] [ P ] [ P ] [ P 1 

IOA [ 3 /1R ] [ P 3 [ P 3 [ P 3 

COMPARE [ / ] C 3 [3 [3 

RECOMMENDATIONS: (If different from NASA) 

[ / 3 [ 3 [ 3 [ 3 


CIL 

ITEM 


[ 3 * 

[ 3 

[ 3 


[ 3 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: POWER CIRCUIT (AA'S 3&4) FAILS OPEN. 

FMEA FAILURE MODE: LIMITING RESISTORS FAIL OPEN, SHORT, HIGH 

RESISTANCE. 

NO DIFFERENCE. 


REPORT DATE 02/03/88 


C-91 



APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 12/23/86 NASA DATA: 

ASSESSMENT ID: GNC-1012A BASELINE [ ] 

NASA FMEA #: 05-60-(04), PREL REF NO. NEW [ X ] 

SUBSYSTEM: GNC 

MDAC ID: 1012 

ITEM: CIRCUIT-AA ' S 3 & 4 POWER 

LEAD ANALYST: LES DRAPELA 

ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS CIL 

FLIGHT ITEM 

HDW/FUNC A B C 

NASA [ 3 /1R ] [P] [P] [ P ] []* 

IOA [ 3 /1R ] [ P ] [ P ] [ P ] [ ] 

COMPARE [ / ] [][][] [ ] 


RECOMMENDATIONS: (If different from NASA) 

t / ] [][][] ( ] 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: POWER CIRCUIT (AA'S 3&4) FAILS OPEN. 

FMEA FAILURE MODE: SWITCH FLT CONTROL (AA 3&4) - PREMATURE 

OPERATION, SHORTS, OPENS. 

NO DIFFERENCE. 


REPORT DATE 02/03/88 


C-92 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 12/23/86 

ASSESSMENT ID: GNC-1012B 

NASA FMEA #: 05-60-(05), PREL REF NO. 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1012 

CIRCUIT- AA'S 3 & 4 POWER 


LEAD ANALYST: LES DRAPELA 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

c 


NASA [ 3 /1R ] 

[ P 3 

[ P 3 

[ P 3 

[ 

IOA [ 3 /1R ] 

[ P 3 

[ P 3 

[ P 3 

[ 

COMPARE [ / ] 

( 3 

[ 3 

[ 3 

c 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [][][] C 3 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS ! 

IOA FAILURE MODE: POWER CIRCUIT (AA'S 3&4) FAILS OPEN. 

FMEA FAILURE MODE: RPC - LOSS OF OUTPUT, FAILS TO CONDUCT, 

OPENS , PREMATURE OPERATION . 

NO DIFFERENCE. 


REPORT DATE 02/03/88 


C-93 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 12/23/86 
ASSESSMENT ID: GNC-1013 
NASA FMEA #: NONE 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1013 

CIRCUIT-AA'S 3 & 4 POWER 


LEAD ANALYST: LES DRAPE LA 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 


FLIGHT 





ITEM 


HDW/FXJNC 

A 

B 


C 


NASA 

[ / ] 

[ ] 

[ 

] 

[ ] 

[ 3 

IOA 

[3/3 ] 

[ P ] 

[ P 

] 

[ P ] 

[ ] 

COMPARE 

[ N /N ] 

[ N ] 

[ N 

] 

[ N ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ ] 


(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: POWER CIRCUIT (AA'S 3&4) FAILS CLOSED. 

NASA/RI DID NOT COVER THIS FAILURE MODE. IOA DOES RECOMMEND A 
FMEA BEING WRITTEN FOR COMPLETENESS. 


REPORT DATE 02/03/88 


C-94 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


3/25/87 

GNC-1014X 

05-60-200501-1 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1014 

DIODE - AA'S 3 & 4 POWER CIRCUITS 


LEAD ANALYST: LES DRAPE LA 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY 

SCREENS 


FLIGHT 





HDW/FUNC 

A 

B 


NASA 

[ 3 /1R ] 

[ P ] 

[ F 

] [ 

IOA 

[ 3 /1R ] 

[ P 3 

[ F 

] t 


CIL 

ITEM 


[ X ] * 
[ X ] 


COMPARE [ / 


] 


RECOMMENDATIONS : 

[ / 


(If different from NASA) 

( ] [ ] [ 


[ 1 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 


REMARKS I 

IOA FAILURE MODE: DIODE FAILS OPEN. 


FMEA FAILURE MODE: OPEN (ELECTRICAL) . 

AA'S 3 & 4 HAVE TWO POWER CIRCUITS. THE LOSS OF ONE DIODE 
REMOVES ONE POWER CIRCUIT ONLY. THE OTHER CIRCUIT CONTINUES 
SUPPLY POWER TO THE RGA. THE LOSS OF ONE DIODE CANNOT BE 
DETECTED, THEREFORE SCREEN B IS FAILED. 

NO CIL RETENTION RATIONALE WAS AVAILABLE AT THE TIME OF THIS 


ASSESSMENT. 


TO 


REPORT DATE 02/03/88 


C-95 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 
ASSESSMENT ID: GNC-1101 

NASA FMEA #: NONE 


SUBSYSTEM: GNC 

MDAC ID: 1101 

ITEM: ASA 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


LEAD ANALYST: ROBERT O'DONNELL 

ASSESSMENT: 



CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 


FLIGHT 

HDW/FUNC 

A 

B 



C 

ITEM 

NASA 

[ / 3 

[ ] 

[ 

] 

[ 

] 

C ] 
[ ] 

IOA 

[ 3 /1R ] 

[ P ] 

[ P 

] 

[ 

P 1 

COMPARE 

[ N /N ] 

[ N ] 

[ N 

] 

[ 

N ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 




[ 3 /1R ] 

[ P ] 

[ P 

] 

[ 

P ] 

[ ] 


(ADD/ DELETE) 

* OIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ 1 

REMARKS: 

IOA FAILURE MODE: ISOL CMD FL OFF IN ONE CHN. 

FMEA FAILURE MODE: NONE. 

IT IS NOT CLEAR THAT NASA/RI COVERED THIS FAILURE MODE IN FMEA 
05-1-FC6042-2 (ERRONEOUS OUTPUT) CRIT 3/1R. RECOMMEND NASA/RI 
PROVIDE ADDITIONAL INFORMATION IN FMEA TO CLARIFY FAILURE MODES 
ANALYZED. IOA DOES RECOMMEND THAT A NEW FMEA BE WRITTEN FOR 
COMPLETENESS. THE ISOL CMD FL OFF WILL INHIBIT THE ISOLATION OF 
THE CHN IF AN ASA SYSTEM FAILURE IS DETECTED. 


REPORT DATE 02/03/88 


C-96 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 
ASSESSMENT ID: GNC-1102 

NASA FMEA #: NONE 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


SUBSYSTEM: GNC 

MDAC ID: 1102 

ITEM: ASA 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [ / ] 

[ ] 

[ 1 

[ ] 

[ ] 

IOA [ 3 /1R ] 

[ P ] 

[ P ] 

[ P ] 

[ ] 

COMPARE [ N /N ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 


RECOMMENDATIONS : 
[ 3 /1R 


(If different from NASA) 

[ P ] [ P ] C P ] 


[ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS ; 

IOA FAILURE MODE: ISOL CMD FL ON FOR ONE CHN. 

FMEA FAILURE MODE: NONE. 

IT IS NOT CLEAR THAT NASA/RI COVERED THIS FAILURE MODE IN FMEA 
05— 1-FC6042-2 (ERRONEOUS OUTPUT) CRIT 3/1R. RECOMMEND NASA/RI 
PROVIDE ADDITIONAL INFORMATION IN FMEA TO CLARIFY FAILURE MODES 
ANALYZED. IOA DOES RECOMMEND THAT A NEW FMEA BE WRITTEN FOR, 
COMPLETENESS . 


REPORT DATE 02/03/88 


C-97 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 


1/23/87 

GNC-1103 

05-1-FC6042-1 

GNC 

1103 

ASA 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


LEAD ANALYST: ROBERT O'DONNELL 

ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 






ITEM 


HDW/FUNC 

A 

B 



C 


NASA 

C 2 /1R ] 

[ P ] 

[ F 

] 

[ 

P ] 

[ X ] * 

IOA 

[ 2 /1R ] 

[ P ] 

[ P 

] 

[ 

P ] 

[ X ] 

COMPARE 

t / ] 

[ ] 

[ N 

] 

[ 

] 

[ ] 

RECOMMENDATIONS : 

(If different 

from 

NASA) 




[ / 1 

[ ] 

[ 

] 

[ 

] 

[ 1 


(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ X ] 
INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: NO POSITION ERR CMD TO ACTR CHN (NULL OUTPUT) . 
FMEA FAILURE MODE: LOSS OF OUTPUT. 

IOA DOES CONCUR WITH NASA's REEVALUATION AND RATIONALE AS SHOWN 
IN THE NASA- JSC FMEA REVIEW COMMENTS. DUAL NULL (ASA LOSS OF 
OUTPUT) FAILURES OF AEROSURFACE RATE COMMANDS WILL BE UNDETECTED 
BY THE ASA DELTA P FAULT DETECT CIRCUIT AND MCC MONITORING 
SYSTEMS WHILE SURFACE POSITIONS ARE NOT CHANGING. THE TWO 
UNDETECTED NULL FAILURES, DURING ATMOSPHERIC FLIGHT MANEUVERS, 
WILL CAUSE A 2 ON 2 CHN FORCE FIGHT AND MAY RESULT IN LOSS OF 
VEHICLE. AS A RESULT OF NASA REVISIONS, AND FURTHER IOA ASA 
FAILURE ANALYSIS, IOA DOES NOT RECOMMEND A CHANGE TO THE EXISTING 
FMEA REDUNDANCY SCREEN B. 


REPORT DATE 02/03/88 


C-98 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 
ASSESSMENT ID: GNC-1104 

NASA FMEA #: 05-1-FC6042-2 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: GNC 

MDAC ID: 1104 

ITEM: ASA 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 

CRITICALITY 

FLIGHT 

HDW/FUNC 

NASA [ 3 /1R ] 

IOA [ 3 /1R ] 

COMPARE [ / ] 


REDUNDANCY SCREENS 
ABC 

[ P ] [ P ] C p 1 

[ P ] [ P ] C P 1 

[ ] E ] c ] 


CIL 

ITEM 


C ] * 

[ 3 

[ ] 


RECOMMENDATIONS : 

t / 


(If different from NASA) 

[ ] C ] C 


[ ] 

(ADD/DELETE) 


] 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ 
INADEQUATE [ ] 

REMARKS l 

IOA FAILURE MODE: ERRONEOUS POSITION ERROR CMD TO ACTR. 
FMEA FAILURE MODE: ERRONEOUS OUTPUT. 

NO DIFFERENCES . 


REPORT DATE 02/03/88 


C-99 


APPENDIX 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 
ASSESSMENT ID: GNC-1105 

NASA FMEA #: NONE 


NASA DATA: 
BASELINE [ 
NEW [ 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


GNC 

1105 

ASA 

ROBERT O'DONNELL 


CRITICALITY 

REDUNDANCY SCREENS 

FLIGHT 




HDW/FUNC 

A 

B 

C 

NASA [ / ] 

[ ] 

[ ] 

[ ] 

IOA [ 3 /1R ] 

[ P ] 

[ P ] 

[ P ] 

COMPARE [ N /N ] 

t N ] 

[ N ] 

[ N ] 


CIL 

ITEM 


[ ] 


RECOMMENDATIONS : 

[ 3 /1R ] 


(If different from NASA) 

C P ] [ P ] [ P ] 


[ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

remarks: inadequate [ J 

ioa FAILURE MODE: no output, or erroneous output on one position 

FDBK XDCR CHN . 

FMEA FAILURE MODE: NONE. 

IT IS NOT CLEAR THAT NASA/RI COVERED THIS FAILURE MODE IN FMEA 
05-1-FC6042-2 . SINCE THIS FAILURE MODE AFFECTS ERRONEOUS OUTPUT 
IN FMEA 05-1-FC6042-2 AND HAS THE SAME CRITICALITY (3/1R) IOA 
DOES RECOMMEND THAT A NEW FMEA BE WRITTEN FOR COMPLETENESS. 


REPORT DATE 02/03/88 


C-100 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


1/23/87 

GNC-1106 

NONE 

GNC 

1106 

ASA 

ROBERT O'DONNELL 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


CRITICALITY 

REDUNDANCY SCREENS 

FLIGHT 




HDW/FUNC 

A 

B 

C 

NASA [ / ] 

[ 3 

[ 3 

[ 3 

IOA [ 3 /1R ] 

[ P 3 

[ P ] 

[ P ] 

COMPARE [ N /N ] 

[ N ] 

[ N ] 

[ N ] 


RECOMMENDATIONS: (If different from NASA) 

[ 3 /1R ] [ P ] [ P ] t p ] 


CIL 

ITEM 


[ ] * 

[ 3 

[ ] 


[ 1 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: 


(If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 


REMARKS ! 

IOA FAILURE MODE: NO OUTPUT/ERRONEOUS OUTPUT ON ONE SEC DELTA P 
FDBK XDCR CHN . 

FMEA FAILURE MODE: NONE. „„ 

IT IS NOT CLEAR THAT NASA/RI COVERED THIS FAILURE MODE IN FMEA 
05— 1-FC6042-2 . SINCE THIS FAILURE MODE AFFECTS ERRONEOUS OUTPUT 
IN FMEA 05-1-FC6042-2 AND HAS THE SAME CRITICALITY (3/1R), IOA 
DOES RECOMMEND THAT A NEW FMEA BE WRITTEN FOR COMPLETENESS. 


REPORT DATE 02/03/88 


C-101 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 
ASSESSMENT ID: GNC-1107 

NASA FMEA #: NONE 


SUBSYSTEM: GNC 

MDAC ID: 1107 

ITEM: ASA 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


LEAD ANALYST: ROBERT O'DONNELL 

ASSESSMENT: 



CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 


FLIGHT 





ITEM 


HDW/FUNC 

A 

B 


C 


NASA 

C / ] 

C 3 

[ 

] 

[ ] 

C ] * 

IOA 

[ 3 /1R ] 

[ P ] 

[ P 

] 

[ P ] 

C ] 

COMPARE 

[ N /N ] 

[ N ] 

[ N 

] 

[ N ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ 3 /1R ] 

C P ] 

[ P 

] 

[ P ] 

[ ] 







(ADD/DELETE) 


* CIL RETENTION RATIONALE: 


REMARKS: 


(If applicable) 

ADEQUATE [ 
INADEQUATE [ 


] 

] 


IOA FAILURE MODE: NO OUTPUT/ ERRONEOUS OUTPUT ON 1 ELVN PR1 DELTA 
P FDBK XDCR CHN. 

FMEA FAILURE MODE: NONE. 

IT IS NOT CLEAR THAT NASA/RI COVERED THIS FAILURE MODE IN FMEA 
05-1-FC6042-2. SINCE THIS FAILURE MODE AFFECTS ERRONEOUS OUTPUT 
IN FMEA 05-1-FC6042-2 AND HAS THE SAME CRITICALITY (3/1R) IOA 
DOES RECOMMEND THAT A NEW FMEA BE WRITTEN FOR COMPLETENESS. 


REPORT DATE 02/03/88 


C-102 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 
ASSESSMENT ID: GNC-1108 

NASA FMEA #: NONE 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


SUBSYSTEM: GNC 

MDAC ID: 1108 

ITEM: ASA 


LEAD ANALYST: ROBERT O'DONNELL 

ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 


NASA 

[ 

/ 

] 

[ 

3 [ 

3 

[ 

IOA 

C 

3 /1R 

] 

[ P 

3 [ 

P 3 

[ P 

COMPARE 

[ 

N /N 

] 

[ N 

3 [ 

N ] 

[ N 

RECOMMENDATIONS : 


(If different 

from 

NASA) 


[ 

3 /1R 

3 

[ P 

3 t 

P 3 

[ P 


] 

] 

] 

] 


CIL 

ITEM 


[ ] * 

[ ] 

[ 3 


[ ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REM ARKS ; 

IOA FAILURE MODE: BDY FLP CMD CHN (1 OF 3) INOPERATIVE. 

FMEA FAILURE MODE: NONE. 

SINCE THIS FAILURE MODE MAY HAVE BEEN CONSIDERED DURING ANALYSIS 
OF FMEA 05-1-FC6042-2 WITH THE SAME CRITICALITY (3/1R) , IOA DOES 
RECOMMEND THAT A NEW FMEA BE WRITTEN FOR COMPLETENESS. 


REPORT DATE 02/03/88 


C-103 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


1/23/87 

GNC-1110 

05-1-FC7244-0001 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1110 

CIRCUIT-FCS CHN CNTL 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


LEAD ANALYST: 


ROBERT O'DONNELL 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 






ITEM 


HDW/FUNC 

A 

B 



C 


NASA 

[ 3 /1R ] 

[ F ] 

[ P 

] 

[ 

P ] 

[ X ] 

IOA 

[ 3 /1R ] 

t P 3 

[ P 

] 

[ 

P ] 

[ 3 

COMPARE 

[ / ] 

[ N ] 

C 

] 

[ 

] 

[ N ] 

RECOMMENDATIONS : 

(If different 

from 

NASA) 




[ 3 /1R ] 

[ P 3 

( P 

] 

[ 

P ] 

[ X ] 


(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: SWITCH CONTACT FAILS CLOSED (AT 
TRANSFER/PREMATURE) . 

FMEA FAILURE MODE: FAILS TO TRANSFER. 

IOA DOES NOT CONCUR WITH NASA'S REEVALUATION AND RATIONALE FOR 
CHANGING SCREEN "A" FROM P (PASS) TO F (FAIL) . SWITCH NORMALLY 
REMAINS IN AUTO POSITION DURING GROUND TURNAROUND TESTING, AND IS 
FUNCTIONALLY CHECKED ONLY AFTER A SPECIFIC NUMBER OF 
FLIGHTS. THE CIL WAS NOT AVAILABLE FOR EVALUATION OF THE 
RETENTION RATIONALE. REDUNDANT ITEMS PASS SCREEN-A, IF THEY ARE 
CAPABLE OF CHECKOUT DURING NORMAL GROUND TURNAROUND. 


REPORT DATE 02/03/88 


C-104 


APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE : 
ASSESSMENT ID: 
NASA FMEA #: 


1/23/87 

GNC-1111 

05-1-FC7244-0001 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1111 

CIRCUIT-FCS CHN CNTL 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 


FLIGHT 





ITEM 


HDW/FUNC 

A 

B 


C 


NASA 

[ 3 /1R ] 

[ F ] 

[ P 

] 

[ P ] 

[ X ] * 

IOA 

[ 3 /1R ] 

[ P ] 

[ P 

] 

[ P ] 

[ 3 

COMPARE 

[ / ] 

[ N ] 

[ 

] 

[ ] 

[ N ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ 3 /1R ] 

[ P ] 

[ P 

] 

[ P ] 

[ X ] 







(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS I 

IOA FAILURE MODE: SWITCH CONTACT OR CURRENT LIMIT RESISTOR FAILS 
OPEN OR SHORTED TO GROUND (AT TRANSFER/PREMATURE) . 

FMEA FAILURE MODE: FAILS TO TRANSFER 

IOA DOES NOT CONCUR WITH NASA'S REEVALUATION AND RATIONALE FOR 
CHANGING SCREEN "A" FROM P (PASS) TO F (FAIL) . SWITCH NORMALLY 
REMAINS IN AUTO POSITION DURING GROUND TURNAROUND TESTING, AND IS 
FUNCTIONALLY CHECKED ONLY AFTER A SPECIFIC NUMBER OF 
FLIGHTS. THE CIL WAS NOT AVAILABLE FOR EVALUATION OF THE 
RETENTION RATIONALE. REDUNDANT ITEMS PASS SCREEN-A, IF THEY ARE 
CAPABLE OF CHECKOUT DURING NORMAL GROUND TURNAROUND. 


REPORT DATE 02/03/88 


C-105 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


1/23/87 

GNC-1111A 

05-1-FC7244-0002 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1111 

CIRCUIT-FCS CHN CNTL 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 



CRITICALITY 


REDUNDANCY 

SCREENS 

CIL 



FLIGHT 







ITEM 


HDW/FUNC 


A 

B 



C 



NASA 

[ 3 /1R ] 

[ 

F ] 

[ P 

] 

[ 

P ] 

C x 

] * 

IOA 

[ 3 /1R ] 

[ 

P ] 

[ P 

] 

[ 

P ] 

[ 

] 

COMPARE 

[ / ] 

[ 

N ] 

[ 

] 

[ 

] 

[ N 

] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 





[ 3 /1R ] 

[ 

P ] 

[ P 

] 

C 

P ] 

[ x 

] 


(ADD/ DELETE) 


* CIL RETENTION RATIONALE: 


REMARKS: 


(If applicable) 

ADEQUATE [ 
INADEQUATE [ 


] 

] 


IOA FAILURE MODE: SWITCH CONTACT OR CURRENT LIMIT RESISTOR FAILS 
OPEN OR SHORTED TO GROUND (AT TRANSFER/PREMATURE) . 

FMEA FAILURE MODE: SHORTED TO GROUND , OPEN, PREMATURE OPERATION. 
IOA DOES NOT CONCUR WITH NASA'S REEVALUATION AND RATIONALE FOR 
CHANGING SCREEN "A" FROM P (PASS) TO F (FAIL) . SWITCH NORMALLY 
REMAINS IN AUTO POSITION DURING GROUND TURNAROUND TESTING, AND IS 
FUNCTIONALLY CHECKED ONLY AFTER A SPECIFIC NUMBER OF 
FLIGHTS. THE CIL WAS NOT AVAILABLE FOR EVALUATION OF THE 
RETENTION RATIONALE. REDUNDANT ITEMS PASS SCREE- A, IF THEY ARE 
CAPABLE OF CHECKOUT DURING NORMAL GROUND TURNAROUND. 


REPORT DATE 02/03/88 


C-106 



APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 NASA DATA: 

ASSESSMENT ID: GNC-1111B BASELINE [ ] 

NASA FMEA #: 05-60-(06), PREL REF NO. NEW [ X ] 

SUBSYSTEM: GNC 

MDAC ID: 1111 

ITEM: CIRCUIT-FCS CHN CNTL 

LEAD ANALYST: ROBERT O'DONNELL 

ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 

NASA [ 3 /1R ] [ P ] [ P ] [ P ] 

IOA [ 3 /1R ] [ P ] [ P ] [ P ] 

COMPARE [ / ] [ ] [ ] [ ] 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [][][] [3 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS i 

IOA FAILURE MODE: SWITCH CONTACT OR CURRENT LIMIT RESISTOR FAILS 
OPEN OR SHORTED TO GROUND (AT TRANSFER/ PREMATURE) . 

FMEA FAILURE MODE: 1.2K CURRENT LIMITING RESISTOR (FOR ATVC AND 
ASA PWR SUPPLY) FAILS OPEN, OUT-OF-TOLERANCE, OR SHORTED. 

NO DIFFERENCES: THE OUT-OF-TOLERANCE AND SHORTED (ZERO 

RESISTANCE) FAILURE MODES WERE NOT CONSIDERED BY IOA SINCE THESE 
FAILURE MODES WOULD ALWAYS REFLECT A CRITICALITY OF 3/3. THE 
"OPEN" FAILURE REFLECTS THE WORST CASE CRITICALITY OF THE 
RESISTOR. 


CIL 

ITEM 


[ 3 * 

[ 3 

[ 3 


REPORT DATE 02/03/88 


C-107 


APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 

ASSESSMENT ID: GNC-1111C 

NASA FMEA #: 05-60-(08), PREL REF NO. 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1111 

CIRCUIT-FCS CHN CNTL 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

c 


NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ 

IOA 

[ 3 /1R ] 

[ P ] 

[ P ] 

[ p ] 

[ 

COMPARE 

[ /N ] 

[ N ] 

[ N ] 

[ N ] 

[ 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ / ] 

[ ] 

[ ] 

[ 3 

[ : 


* 


(ADD/DELETE) 


* CIL RETENTION RATIONALE: 


REMARKS: 


(If applicable) 

ADEQUATE [ 
INADEQUATE [ 


] 

] 


IOA FAILURE MODE: SWITCH CONTACT OR CURRENT LIMIT RESISTOR FAILS 
OPEN OR SHORTED TO GROUND (AT TRANSFER/ PREMATURE) . 

FMEA FAILURE MODE: 1.2K CURRENT LIMITING RESISTOR (FOR OVERRIDE 
SIGNAL TO GPC) FAILS OPEN, OUT-OF-TOLERANCE, OR SHORTED. 

THE OUT-OF-TOLERANCE AND SHORTED (ZERO RESISTANCE) FAILURE MODES 
WERE NOT CONSIDERED BY IOA SINCE THESE FAILURE MODES WOULD ALWAYS 
REFLECT A CRITICALITY OF 3/3. THE "OPEN" FAILURE REFLECTS THE 
WORST CASE CRITICALITY OF THE RESISTOR. 

IOA FAILURE MODE INCLUDED ALL SWITCH CONTACTS OR RESISTORS FAILED 
OPEN WITH WORST CASE CRITICALITY OF 3/1R FOR PREL FMEA NO 05-60- 
(06) . IOA AGREES WITH A CRITICALITY OF 3/3 FOR THE CURRENT 
LIMITING RESISTOR IN THE OVERRIDE CHN. OVERRIDE POSITION ONLY 
REQUIRED IF PREVIOUS FAILURES EXIST IN THE ASA/ATVC SYSTEM. 


REPORT DATE 02/03/88 


C-108 



APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 
ASSESSMENT ID: GNC-1112 

NASA FMEA #: 05-60-(13), PREL REF NO. 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1112 

CIRCUIT-FCS CHN CNTL 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS 

FLIGHT 



HDW/FUNC 

A 

B 


C 

NASA 

[ 3 /3 

] 

[ NA] [ 

NA] 

[ 

NA] 

IOA 

[ 3 /1R 

] 

[ P ] [ 

P ] 

[ 

P ] 

COMPARE 

[ /N 

] 

[ N ] [ 

N ] 

[ 

N ] 

RECOMMENDATIONS : 


(If different 

from 

NASA) 



[ / 

] 

[ ] [ 

] 

[ 

] 


CIL 

ITEM 


[ ] * 

[ ] 

[ ] 


[ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: DIODE FAILS OPEN. 

FMEA FAILURE MODE: DIODE OPEN BETWEEN FCS SWITCH OVERRIDE AND 
AUTO POSITIONS. 

AFTER NASA/RI REEVALUATION OF FMEA AND FURTHER IOA EVALUATION OF 
SYSTEM OERATION, IOA DOES CONCUR WITH THE NEW FMEA. IF DIODES 
FAIL OPEN, THE FCS CHN SWITCH IN OVERRIDE WILL REMOVE POWER FROM 
ASA/ATVC PWR SUPPLY AND ISSOLATE CHN FROM SYSTEM. OVERRIDE 
POSITION ONLY REQUIRED IF PREVIOUS FAILURES EXIST IN THE ASA/ATVC 
SYSTEM. FCS CHN SWITCH IN AUTO WILL RESTORE POWER TO THE 
RESPECTIVE ASA/ATVC. 


REPORT DATE 02/03/88 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


1/23/87 

GNC-1130 

05-60-200701-1 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1130 

CIRCUIT-ASA ' S 1,2, 3,4 POWER 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 


CIL 

ITEM 


NASA [ 3 /1R ] [ P ] [ F ] [ P ] 

IOA [ 3 /1R ] [ P ] [ P ] [ P ] 


[ X ] * 

[ ] 


COMPARE [ / 


N ] [ ] [ N ] 


RECOMMENDATIONS: (If different from NASA) 


£ / 3 £][][] [ ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ 1 

REMARKS: 

IOA FAILURE MODE: POWER CIRCUIT FAILS OPEN (OFF), DURING POWER 
TRANSFER OR PREMATURELY. 

FMEA FAILURE MODE: OPEN - 12/35 AMP DIODE (TO PWR SUPPLY) . 

AFTER NASA/RI REEVALUATION OF FMEA AND FURTHER IOA EVALUATION OF 
SYSTEM OPERATION, IOA DOES CONCUR WITH THE REVISED FMEA. ONE 
REDUNDANT DIODE FL OPN IS NOT DETECTABLE. TWO REDUNDANT DIODES 
FL OPN ARE DETECTABLE BY LOSS OF PWR TO CHN, AND RESULTS IN 
CONTROL CHANNEL ISOLATION. THE CIL WAS NOT AVAILABLE FOR 
EVALUATION OF THE RETENTION RATIONALE. 


REPORT DATE 02/03/88 


C-110 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 NASA DATA: 

ASSESSMENT ID: GNC-1130A BASELINE [ ] 

NASA FMEA #: 05-60-200703-1 NEW [ X ] 

SUBSYSTEM: GNC 

MDAC ID: 1130 

ITEM: CIRCUIT-ASA'S 1,2, 3, 4 POWER 

LEAD ANALYST: ROBERT O'DONNELL 

ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 

NASA [3/3 ] [ NA] [ NA] [ NA] 

IOA [ 3 /1R ] [ P ] [ P ] [ P ] 

COMPARE [ /N ] [ N ] [ N ] [ N ] 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [][][] c 3 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS 2 

IOA FAILURE MODE: POWER CIRCUIT FAILS OPEN (OFF) , DURING POWER 
TRANSFER OR PREMATURELY. 

FMEA FAILURE MODE: OPEN - 12/35 AMP DIODE (TO ISOL VLV DRIVER) . 
AFTER NASA/RI REEVALUATION OF FMEA AND FURTHER IOA EVALUATION OF 
SYSTEM OPERATION, IOA DOES CONCUR WITH THE REVISED FMEA. THE 
DIODES FAILING OPEN WILL CAUSE THE ISOL VALVE DRIVER TO FAIL OFF 
AND INHIBIT THE ASA FROM ISOLATING THE CHN IF AN ASA SYSTEM 
FAILURE IS DETECTED. ASA-4 (CHN-4) ISOL VLV DRIVERS NOT 
REDUNDANTLY POWERED LIKE ASA-1, 2, AND 3. 


CIL 

ITEM 


[ ] * 
[ 3 

[ 3 


REPORT DATE 02/03/88 


C-lll 


APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


1/23/87 

GNC-1130B 

05-60-200706-1 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1130 

CIRCUIT-ASA ' S 1,2, 3,4 POWER 


LEAD ANALYST: ROBERT O’DONNELL 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

c 


NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ 

IOA 

[ 3 /1R ] 

[ P ] 

[ P ] 

[ p ] 

[ 

COMPARE 

[ /N ] 

[ N ] 

[ N ] 

[ N ] 

[ 

RECOMMENDATIONS: (If 

different 

from 

NASA) 



[ / ] 

[ ] 

[ ] 

[ 3 

[ 


(ADD/ DELETE) 


* CIL RETENTION RATIONALE: 


REMARKS: 


(If applicable) 

ADEQUATE [ 
INADEQUATE [ 


] 

] 


IOA FAILURE MODE: POWER CIRCUIT FAILS OPEN (OFF) , DURING POWER 
TRANSFER OR PREMATURELY. 

FMEA FAILURE MODE: FAILS OPEN, SHORTS TO GROUND (RPC TO ISOL VLV 
DRIVER) . V 

AFTER NASA/RI REEVALUATION OF FMEA AND FURTHER IOA EVALUATION OF 
SYSTEM OPERATION, IOA DOES CONCUR WITH THE REVISED FMEA. THE 
RPC'S FAILING OPEN WILL CAUSE THE ISOL VALVE DRIVER TO FAIL OFF 
AND INHIBIT THE ASA FROM ISOLATING THE CHN IF AN ASA SYSTEM 
FAILURE IS DETECTED. ASA-4 (CHN-4) ISOL VLV DRIVERS NOT 
REDUNDANTLY POWERED LIKE ASA-1, 2, AND 3. 


REPORT DATE 02/03/88 


C-112 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 

ASSESSMENT ID: GNC-1130C 

NASA FMEA #: 05-60-(14), PREL REF NO. 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1130 

CIRCUIT-ASA ' S 1,2, 3, 4 POWER 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT 

• 

• 







CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 



FLIGHT 





ITEM 


HDW/FUNC 

A 

B 


C 


NASA 

[ 

2 /1R ] 

[ P ] 

[ F 

] 

[ P ] 

[ x ] * 

IOA 

[ 

3 /1R ] 

[ P ] 

[ P 

] 

[ P ] 

[ ] 

COMPARE 

[ 

N / ] 

[ 3 

[ N 

] 

[ ] 

[ N ] 

RECOMMENDATIONS : (If 

different from 

NASA) 



[ 

/ ] 

[ 1 

[ 

] 

[ ] 

[ ] 

/inn/nPT.PTFl 


(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS ! 

IOA FAILURE MODE: POWER CIRCUIT FAILS OPEN (OFF), DURING POWER 
TRANSFER OR PREMATURELY. 

FMEA FAILURE MODE: ASA POWER SW FAILS TO TRANSFER (OPEN) . 

AFTER NASA/RI REEVALUATION OF FMEA AND FURTHER IOA EVALUATION OF 
SYSTEM OPERATION, IOA DOES CONCUR WITH THE NEW FMEA. WITH 2 ASA 
PWR SWITCHES FAILED TO TRANSFER (OPEN) , THERE WILL EXIST A 2 ON 2 
ASA CHN FORCE FIGHT WHICH COULD RESULT IN LOSS OF VEHICLE 
CONTROL. LOSS OF SWITCH IS NOT READILLY DETECTABLE, BUT THE 
RESULTING LOSS OF RPC PWR AND ASA CHN IS DETECTABLE. LOSS OF 
ISOL VLV DRIVER PWR NOT DETECTABLE. THE CIL WAS NOT AVAILABLE 
FOR EVALUATION OF THE RETENTION RATIONALE. 


REPORT DATE 02/03/88 


C-113 


APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 

ASSESSMENT ID: GNC-1130D 

NASA FMEA #: 05-60-(15), PREL REF NO. 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1130 

CIRCUIT-ASA ' S 1,2 ,3, 4 POWER 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 


CIL 

ITEM 


NASA [ 3 /1R ] [ P ] 

IOA [ 3 /1R ] [ P ] 

COMPARE [ / ] [ ] 


[ 

F 

] 

[ P ] 

[ X ] * 

[ 

P 

] 

[ P ] 

[ ] 

[ 

N 

] 

C ] 

[ N ] 


RECOMMENDATIONS : 

[ / 


(If different from NASA) 

[ ] [ ] [ 


C ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: 


REMARKS: 


(If applicable) 

ADEQUATE [ 
INADEQUATE [ 


] 

] 


IOA FAILURE MODE: POWER CIRCUIT FAILS OPEN (OFF) , DURING POWER 
TRANSFER OR PREMATURELY. 

FMEA FAILURE MODE: ASA POWER SW POLE (CONTACT) FAILS OPEN, SHORT 
PREMATURE OPERATION. ' 

AFTER NASA/RI REEVALUATION OF FMEA AND FURTHER IOA EVALUATION OF 
SYSTEM OPERATION, IOA DOES CONCUR WITH THE NEW FMEA. FOR PWR SW 
WORST CASE, 2 CONTACT FAIL OPEN (LOSS OF ISOL DRIVER) , 2 CONT 
FAIL OPEN (LOSS OF PWR SUPPLY/CHN) , 3 CONT FAIL OPEN (LOSS OF 
PWR SUPPLY WITHOUT CHN ISOLATION) . LOSS OF CONTACTS ARE NOT 
READILY DETECTABLE, BUT THE RESULTING LOSS OF RPC PWR AND ASA CHN 
IS DETECTABLE. ASA CHN -4 ISOL VALVE DRIVERS NOT REDUNDANTLY 
POWERED LIKE CHN 1, 2, 3. LOSS OF ISOL VLV DRIVER PWR NOT 
DETECTABLE. THE CIL WAS NOT AVAILABLE FOR EVALUATION OF THE 
RETENTION RATIONALE . 


REPORT DATE 02/03/88 


C-114 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 

ASSESSMENT ID: GNC-1130E 

NASA FMEA #: 05-60-(16), PREL REF NO. 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1130 

CIRCUIT-ASA • S 1,2, 3, 4 POWER 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

C 


NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ 3 * 

IOA 

[ 3 /1R ] 

[ P ] 

[ P ] 

[ p ] 

[ ] 

COMPARE 

[ /N ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ / ] 

[ ] 

[ ] 

[ 3 

[ ] 

/mn/nPT.PTFl 


(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS • 

IOA FAILURE MODE: POWER CIRCUIT FAILS OPEN (OFF), DURING POWER 
TRANSFER OR PREMATURELY. 

FMEA FAILURE MODE: 1.2K CURRENT LIMITING RESISTOR (FOR ASA ISOL 
VALVE DRIVER PWR) FAILS OPEN, OUT-OF-TOLERANCE, OR SHORTED. 

THE OUT-OF-TOLERANCE AND SHORTED (ZERO RESISTANCE) FAILURE MODES 
WERE NOT CONSIDERED BY IOA SINCE THESE FAILURE MODES WOULD ALWAYS 
REFLECT A CRITICALITY OF 3/3. THE "OPEN" FAILURE REFLECTS THE 
WORST CASE CRITICALITY OF THE RESISTOR. IOA FALIURE MODE 
WAS POWER CIRCUIT FAILS OPEN (RPC'S, DIODES, AND SWITCH CIRCUIT) 
WITH WORST CASE CRITICALITY OF 3/1R. AFTER FURTHER EVALUATION OF 
SYSTEM OPERATION, IOA DOES CONCUR WITH THE CRITICALITY OF 3/3 FOR 
THE RESISTOR FAILING OPEN, AND LOSS OF ISOL VALVE DRIVER 
POWER. 


REPORT DATE 02/03/88 


C-115 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 

ASSESSMENT ID: GNC-1130F 

NASA FMEA #: 05-60-(17), PREL REF NO. 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1130 

CIRCUIT-ASA * S 1,2, 3, 4 POWER 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 


CIL 

ITEM 


NASA [ 3 /1R ] [ P ] [ P ] [ P ] 

IOA [ 3 /1R ] [ P ] [ p ] [ P ] 


[ ] * 

[ ] 


COMPARE [ / 


] 


RECOMMENDATIONS : 

[ / 


(If different from NASA) 

[ ] [ 1 [ 


[ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: POWER CIRCUIT FAILS OPEN (OFF), DURING POWER 
TRANSFER OR PREMATURELY. 

FMEA FAILURE MODE: RPC FAILS OPEN OR PREMATURE OPERATION (TO ASA 
PWR SUPPLY) . 

NO DIFFERENCES IN NASA/IOA ASSESSMENT OF NEW FMEA. ONE REDUNDANT 
RPC FL OPEN IS DETECTABLE ON INSTRUMENTATION. TWO REDUNDANT RPC'S 
FAIL OPEN ARE DETECTABLE, AND RESULTS IN CONTROL CHANNEL 
ISOLATION. 


REPORT DATE 02/03/88 


C-116 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: GNC-1131 

NASA FMEA #: NONE 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1131 

CIRCUIT-ASA'S 1,2, 3, 4 POWER 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [ / ] 

[ ] 

[ ] 

[ ] 

[ ] 

IOA [3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ 1 

COMPARE [ N /N ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 


RECOMMENDATIONS: (If different from NASA) 

( 3 /3 ] [ NA] [ NA] [ NA] [ ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: POWER CIRCUIT FAILS CLOSED (ON), DURING POWER 
TRANSFER OR PREMATURELY. 

FMEA FAILURE MODE: NA 

AFTER THE FMEA REVIEW, NASA/RI DID NOT COVER THIS FAILURE MODE. 
IOA DOES RECOMMEND WRITING A NEW FMEA FOR COMPLETENESS. 


REPORT DATE 02/03/88 


C-117 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/20/87 
ASSESSMENT ID: GNC-1201 

NASA FMEA #: 05-1-FC6242-1 


SUBSYSTEM: GNC 

MDAC ID: 1201 

ITEM: RJDF 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


LEAD ANALYST: TRAHAN, W. H. 

ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

c 


NASA 

[ 2 /1R ] 

[ P ] 

[ P ] 

[ p ] 

[ X ] 

IOA 

[ 3 /1R ] 

[ P ] 

[ P ] 

[ p ] 

[ ] 

COMPARE 

[ N / ] 

[ ] 

[ ] 

[ ] 

[ N ] 

RECOMMENDATIONS : (If 

different from NASA) 



[ / ] t ] [ 3 C ] [ ] 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ X ] 
INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: NO OUTPUT TO JET. 

FMEA FAILURE MODE: LOSS OF OUTPUT TO ONE OR MORE JETS. 

FAILURE WILL BE DETECTED BY RM. JET WILL NOT BE SELECTED . OTHER 
JETS CAN PERFORM THE DESIRED FUNCTION. 

ADDITIONAL IOA ANALYSIS CHANGED THE HARDWARE CRITICALITY TO 2 
AGREEING WITH THE NASA FMEA FOR THE WORST CASE LOSS OF FWD RCS 
DUMP CAPABILITY. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/20/87 
ASSESSMENT ID: GNC-1203 

NASA FMEA #: 


05-1-FC6342-1 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


GNC 

1203 

RJDA 

TRAHAN, W. H. 


CRITICALITY 

FLIGHT 

HDW/FUNC 

NASA [ 3 /1R ] 

IOA [ 3 / 1R 3 

COMPARE [ / ] 


REDUNDANCY SCREENS 


P 

P 


[ ] 


B 

[ P ] 
[ P 1 

[ 1 


[ P ] 
[ P ] 

[ ] 


CIL 

ITEM 


[ ] 


RECOMMENDATIONS : 

[ / ] 


(If different from NASA) 

( ] [ ] C 


C ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: NO OUTPUT. 

FMEA FAILURE MODE: LOSS OF OUTPUT TO ONE OR MORE JETS. 

FAILURE WILL BE DETECTED BY RM. THE JET WILL NOT BE SELECTED BY 
THE SOFTWARE. OTHER JETS CAN PERFORM THE FUNCTION. 

NO DIFFERENCES. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


3/20/87 

GNC-1205 

05-1-FC6342-2 

GNC 

1205 

RJDA 

TRAHAN, W. H. 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


CRITICALITY 

FLIGHT 

HDW/FUNC 

NASA [1/1 ] 

IOA [1/1 ] 

COMPARE [ / ] 


REDUNDANCY SCREENS 
ABC 

C p 3 [ P ] [ p ] 

t P ] [ P ] [ p ] 

t ] [ ] [ ] 


CIL 

ITEM 


[ X ] * 
[ X ] 

[ ] 


RECOMMENDATIONS: (If different from NASA) 

[ / 3 [][][] [ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: 
REMARKS: 


(If applicable) 

ADEQUATE 

INADEQUATE 


IOA FAILURE MODE: INADVERTENT JET FIRING. 
FMEA FAILURE MODE: ERRONEOUS OUTPUT. 

NO DIFFERENCES. 


C X ] 
[ ] 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 


3/20/87 

GNC-1206 

05-1-FC6242-2 

GNC 

1206 

RJDF 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


LEAD ANALYST: TRAHAN, W. H. 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [1/1 ] 

[ P ] 

[ P ] 

[ P ] 

[ x 

IOA [1/1 ] 

[ P ] 

[ P ] 

[ P ] 

[ x 


COMPARE [ / 


3 


RECOMMENDATIONS : 

(If different from NASA) 


[ / 

] [ ■ 

3 [ ] [ ] 

[ 3 

(ADD/ DELETE) 

* CIL RETENTION 

RATIONALE: 

(If applicable) 



ADEQUATE [ X ] 
INADEQUATE [ ] 

REMARKS I 

IOA FAILURE MODE: INADVERTENT JET FIRING. 

FMEA FAILURE MODE: ERRONEOUS OUTPUT. 

NO DIFFERENCES. 


REPORT DATE 02/03/88 


C-121 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


3/20/87 

GNC-1207 

NONE 

GNC 

1207 

PC FEEDBACK 
TRAHAN, W. H. 


NASA DATA: 
BASELINE [ ] 

NEW [ 1 



CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 


FLIGHT 





ITEM 


HDW/FUNC 

A 

B 


c 


NASA 

C / ] 

[ ] 

[ 

] 

[ 3 

[ 3 

IOA 

[ 3 /1R ] 

[ P ] 

[ P 

3 

[ P 3 

[ 3 

COMPARE 

[ N /N ] 

( N ] 

[ N 

3 

C N ] 

[ 3 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ 3 /1R ] 

[ P ] 

[ P 

3 

[ P 3 

[ 3 


(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: ERRONEOUS OUTPUT. (RJDF) 

FAILURE WILL BE DETECTED BY RM. JET WILL NOT BE SELECTED OTHER 
JETS CAN PERFORM THE DESIRED FUNCTION. IOA RECOMMENDS A FMEA BE 
WRITTEN FOR COMPLETENESS. 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 


3/20/87 

GNC-1208 

NONE 

GNC 

1208 

PC FEEDBACK 
TRAHAN, W. H. 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 

NASA [ / ] 

IOA [ 3 /1R ] 

COMPARE [ N /N ] 


RECOMMENDATIONS : 

[ 3 /1R ] 


REDUNDANCY SCREENS 



A 

B 



C 

[ 

] 

[ 

] 

[ 


[ 

P ] 

[ P 

] 

[ 

P 

[ 

N ] 

[ N 

] 

[ 

N 


(If different from NASA) 

( P ] [ P ] C P 


] 

1 

] 

] 


CIL 

ITEM 


[ 1 * 

[ ] 

[ ] 


[■ ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: ERRONEOUS OUTPUT. (RJDA) 

FAILURE WILL BE DETECTED BY RM. JET WILL NOT BE SELECTED OTHER 
JETS CAN PERFORM THE DESIRED FUNCTION. IOA RECOMMENDS A FMEA BE 
WRITTEN FOR COMPLETENESS. 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


3/20/87 

GNC-1211 

NONE 

GNC 

1211 

POWER CIRCUIT 
TRAHAN, W. H. 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

c 


NASA 

[ / ] 

[ ] 

[ ] 

[ ] 

[ ] 

IOA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ ] 

COMPARE 

( N /N ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from NASA) 



[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ ] 


(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: CIRCUIT FAIL CLOSE (INADVERTENT OUTPUT) RJDF. 
IOA DOES RECOMMEND WRITING A FMEA FOR COMPLETENESS. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


3/20/87 

GNC-1212 

NONE 

GNC 

1212 

POWER CIRCUIT 
TRAHAN, W. H. 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

c 


NASA 

[ / ] 

[ ] 

[ ] 

[ ] 

[ ] * 

IOA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ ] 

COMPARE 

( N /N ) 

[ N ] 

[ N ] 

[ N ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ 3 






(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS Z 

IOA FAILURE MODE: CIRCUIT FAIL CLOSE (INADVERTENT OUTPUT) RJDA. 
IOA DOES RECOMMEND WRITING A FMEA FOR COMPLETENESS. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/20/87 NASA DATA: 

ASSESSMENT ID: GNC-1213 BASELINE [ 

NASA FMEA # : NONE NEW [ 

SUBSYSTEM: GNC 

MDAC ID: 1213 

ITEM: POWER CIRCUIT 

LEAD ANALYST: TRAHAN, W. H. 

ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 

NASA [ / ] [][][] 

IOA [ 3 /1R ] [ P ] [ p ] [ P ] 

COMPARE [ N /N ] [ N ] [ N ] [ N ] 


CIL 

ITEM 


[ ] * 

C ] 

[ ] 


RECOMMENDATIONS: (If different from NASA) 

C / ] [][][] [ ] 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: CIRCUIT FAIL OPEN (NO OUTPUT) RJDA. 

THIS ASSESSMENT ID BEING COVERED BY THE OMS/RCS SUBSYSTEM GROUP. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/20/87 
ASSESSMENT ID: GNC-1214 

NASA FMEA #: NONE 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1214 

POWER CIRCUIT 


LEAD ANALYST: TRAHAN, W. H. 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 


FLIGHT 





ITEM 


HDW/FUNC 

A 

B 


c 


NASA 

[ / 3 

[ 3 

( 

3 

C 3 

[ 3 * 

IOA 

[ 3 /1R ] 

[ p 3 

[ P 

3 

[ P 3 

[ 3 

COMPARE 

[ N /N ] 

[ N ] 

[ N 

3 

[ N ] 

[ 3 

RECOMMENDATIONS : (If 

different from 

NASA) 



[ / 3 

[ 3 

[ 

3 

[ 3 

[ 3 

(inn /m?T.TTT«v \ 


(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS ! 

IOA FAILURE MODE: CIRCUIT FAIL OPEN (NO OUTPUT) RJDF. 

THIS ASSESSMENT IS BEING COVERED BY THE OMS/RCS SUBSYSTEM GROUP. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 
ASSESSMENT ID: GNC-1301 

NASA FMEA #: NONE 


SUBSYSTEM: GNC 

MDAC ID: 1301 

ITEM: ATVC 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


LEAD ANALYST: ROBERT O'DONNELL 

ASSESSMENT: 



CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 


FLIGHT 





ITEM 


HDW/FUNC 

A 

B 


C 


NASA 

[ / ] 

[ ] 

[ 

] 

[ ] 

[ 

IOA 

[ 3 /1R ] 

[ P ] 

[ P 

] 

[ P ] 

[ 

COMPARE 

[ N /N ] 

[ N ] 

[ N 

] 

[ N ] 

[ 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ 3 /1R ] 

[ P ] 

( P 

] 

[ P ] 

[ 


(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: ISOL CMD FL OFF IN ONE CHN. 

FMEA FAILURE MODE: NONE. 

IT IS NOT CLEAR THAT NASA/RI COVERED THIS FAILURE MODE IN FMEA 
05— 1-FC6542-2 (ERRONEOUS OUTPUT) CRIT - 3/1R. 

RECOMMEND NASA/RI PROVIDE ADDITIONAL INFORMATION IN FMEA TO 
CLARIFY FAILURE MODES ANALYZED. IOA DOES RECOMMEND THAT A NEW 
FMEA BE WRITTEN FOR COMPLETENESS. THE ISOL CMD FL OFF WILL 
INHIBIT THE ISOLATION OF THE CHN IF AN ATVC SYSTEM FAILURE IS 
DETECTED. 


REPORT DATE 02/03/88 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 
ASSESSMENT ID: GNC-1302 

NASA FMEA #: NONE 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


SUBSYSTEM: GNC 

MDAC ID: 1302 

ITEM: ATVC 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 

NASA [ / ] 

IOA [ 3 /1R ] 

COMPARE [ N /N ] 


RECOMMENDATIONS : (If 

[ 3 /1R ] 


REDUNDANCY SCREENS 
ABC 

[ ] t ] t ] 

[ P ] [ P ] [ P 1 

[ N ] [ N ] [ N ] 

different from NASA) 

[ P ] [ P 1 C P ] 


CIL 

ITEM 


[ ] * 

[ ] 

[ ] 


[ ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: ISOL CMD FL ON FOR ONE CHN. 

FMEA FAILURE MODE: NONE. 

IT IS NOT CLEAR THAT NASA/RI COVERED THIS FAILURE MODE IN FMEA 
05-1-FC6542-2 (ERRONEOUS OUTPUT) CRIT - 3/1R. 

RECOMMEND NASA/RI PROVIDE ADDITIONAL INFORMATION IN FMEA TO 
CLARIFY FAILURE MODES ANALYZED. IOA DOES RECOMMEND THAT A NEW 
FMEA BE WRITTEN FOR COMPLETENESS. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 


1/23/87 

GNC-1303 

05-1-FC6542-1 

GNC 

1303 

ATVC 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


LEAD ANALYST: ROBERT O'DONNELL 

ASSESSMENT: 



CRITICALITY 


REDUNDANCY 

SCREENS 

CIL 


FLIGHT 

HDW/FUNC 


A 

B 



c 

ITEM 

NASA 

[ 2 /1R ] 

[ 

P ] 

[ F 

] 

[ 

p ] 

[ X ] * 

IOA 

[ 2 /1R ] 

[ 

P ] 

[ P 

] 

[ 

p ] 

t X ] 

COMPARE 

[ / ] 

[ 

] 

[ N 

] 

[ 

] 

t ] 

RECOMMENDATIONS : (If 

different from 

NASA) 




[ / ] 

[ 

] 

[ 

] 

c 

] 

[ ] 









(ADD/DELETE) 

* CIL RETENTION RATIONALE 

: (If 

applicable) 

a r»n/M 

’TTL fTlTI r ^ T i 


ADEQUATE [ X ] 
INADEQUATE [ 1 

REMARKS: 

IOA FAILURE MODE: NO POSITION CMD TO ACTR CHN (NULL OUTPUT) . 

FMEA FAILURE MODE: LOSS OF OUTPUT. 

IOA DOES CONCUR WITH NASA's REEVALUATION AND RATIONALE AS SHOWN 
IN THE NASA/ JSC FMEA REVIEW COMMENTS. DUAL NULL FAILURES (ASA 
LOSS OF OUTPUT) OF ACTUATOR POSITION COMMANDS WILL BE UNDETECTED 
BY THE ATVC DELTA P FAULT DETECT CIRCUIT AND MCC 
MONITORING SYSTEMS WHILE ENGINES ARE NEAR ZERO ENGINE GIMBAL 
POSITION. THE TWO UNDETECTED NULL FAILURES, DURING ASCENT, WILL 
CAUSE A 2 ON 2 CHANNEL FORCE FIGHT AND MAY RESULT IN LOSS OF 
VEHICLE. 

IOA DOES NOT RECOMMEND A CHANGE TO THE EXISTING FMEA REDUNDANCY 
SCREEN B. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


1/23/87 

GNC-1304 

05-1-FC6542-2 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: GNC 

MDAC ID: 1304 

ITEM: ATVC 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 


B 



C 

ITEM 

NASA 

[ 3 /1R ] 

[ P 

] t 

P 

] 

[ 

P ] 

[ ] * 
[ 3 

IOA 

[ 2 /1R ] 

[ P 

] t 

P 

] 

[ 

P ] 

COMPARE 

[ N / ] 

[ 

] [ 


] 

[ 

] 

[ ] 

RECOMMENDATIONS : 

(If different 

from 

NASA) 




[ / 1 

[ 

] [ 


] 

[ 

] 

[ 3 





(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS • 

IOA FAILURE MODE: ERRONEOUS POSITION CMD TO ACTR. 

FMEA FAILURE MODE: ERRONEOUS OUTPUT. 

IOA DOES CONCUR WITH NASA's REEVALUATION AND RATIONALE AS SHOWN 
IN THE FMEA REVISIONS. IF FAILURES ARE PRESENT DURING PRELAUNCH, 
WHEN ATVC FAULT DETECT IS INHIBITED, LAUNCH HOLD WILL BE 
INITIATED PRIOR TO SRB IGNITION. AS A RESULT OF NASA's 
REVISIONS AND FURTHER IOA ATVC FAILURE ANALYSIS, IOA DOES NOT 
RECOMMEND A CHANGE TO THE EXISTING FMEA. 


REPORT DATE 02/03/88 


C-131 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 
ASSESSMENT ID: GNC-1305 

NASA FMEA #: NONE 


SUBSYSTEM: GNC 

MDAC ID: 1305 

ITEM: ATVC 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


LEAD ANALYST: ROBERT O'DONNELL 

ASSESSMENT: 



CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 


FLIGHT 





ITEM 


HDW/FUNC 

A 

B 


C 


NASA 

t / ] 

[ ] 

[ 

] 

[ ] 

[ ] * 

IOA 

[ 3 /1R ] 

[ P ] 

[ P 

] 

[ P ] 

[ ] 

COMPARE 

[ N /N ] 

[ N ] 

[ N 

] 

( N ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ 3 /1R ] 

[ P ] 

[ P 

] 

[ P ] 

[ ] 


(ADD/ DELETE) 


* CIL RETENTION RATIONALE: 


REMARKS: 


(If applicable) 

ADEQUATE [ 
INADEQUATE [ 


] 

] 


IOA FAILURE MODE: NO OUTPUT/ERRONEOUS OUTPUT ON ONE SEC DELTA P 
FDBK XDCR CHN. 


FMEA FAILURE MODE: NONE. 

IT IS NOT CLEAR THAT NASA/RI COVERED THIS 
05-1-FC6542-2, CRIT - 3/1R. THE IOA DOES 
FMEA BE WRITTEN FOR COMPLETENESS. 


FAILURE MODE IN FMEA 
RECOMMEND THAT A NEW 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


1/23/87 

GNC-1310 

05-60-200601-1 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1310 

CIRCUIT- ATVC'S 1,2, 3,4 POWER 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 


FLIGHT 





ITEM 


HDW/FUNC 

A 

B 


C 


NASA 

[ 3 /1R ] 

[ P ] 

[ F 

3 

[ P 3 

[ x ] * 

IOA 

[ 3 /1R ] 

[ P ] 

[ P 

3 

[ P 3 

[ 3 

COMPARE 

[ / ] 

[ 3 

[ N 

3 

C 3 

[ N ] 

RECOMMENDATIONS : (If 

different from 

NASA) 



[ / ] 

( ) 

[ 

3 

C 3 

[ 3 







(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If 

applicable) 



ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: POWER CIRCUIT FAILS OPEN (OFF) , DURING POWER 
TRANSFER OR PREMATURELY. 

FMEA FAILURE MODE: OPEN - 12 AMP DIODE (TO POWER SUPPLY) . 

AFTER NASA/RI REEVALUATION OF FMEA AND FURTHER IOA EVALUATION OF 
SYSTEM OPERATION, IOA DOES CONCUR WITH THE REVISED FMEA. ONE 
REDUNDANT DIODE FL OPN IS NOT DETECTABLE. TWO REDUNDANT DIODES 
FL OPN ARE DETECTABLE BY LOSS OF PWR TO CHN, AND RESULTS IN 
CONTROL CHANNEL ISOLATION. THE CIL WAS NOT AVAILABLE FOR 
EVALUATION OF THE RETENTION RATIONALE. 


REPORT DATE 02/03/88 


C-133 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 
ASSESSMENT ID: GNC-1310A 

NASA FMEA #: 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


05-60-200602-1 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


GNC 

1310 

CIRCUIT- ATVC'S 1,2 ,3, 4 POWER 
ROBERT O'DONNELL 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

c 


NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ ] 

IOA 

[ 3 /1R ] 

[ P ] 

[ P ] 

[ p ] 

[ ] 

COMPARE 

[ /N ] 

[ N ] 

[ N ] 

[ N ] 

C ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ / ] 

[ ] 

[ ] 

[ ] 

[ ] 


(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: POWER CIRCUIT FAILS OPEN (OFF), DURING POWER 
TRANSFER OR PREMATURELY. 

FMEA FAILURE MODE: LOSS OF OUTPUT - RPC (TO ISOL VLV DRIVER) . 
AFTER NASA/RI REEVALUATION OF FMEA AND FURTHER IOA EVALUATION OF 
SYSTEM OPERATION, IOA DOES CONCUR WITH THE REVISED FMEA. THE 
RPC'S FAILING OPEN WILL CAUSE THE ISOL VALVE DRIVER TO FAIL OFF 
AND INHIBIT THE MPS ATVC FROM ISOLATING THE CHN IF AN MPS ATVC 
SYSTEM FAILURE IS DETECTED. ISOL VALVE DRIVERS NOT REDUNDANTLY 
POWERED IN EACH ATVC (CHN) . 


REPORT DATE 02/03/88 


C-134 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 NASA DATA: 

ASSESSMENT ID: GNC-1310B BASELINE [ ] 

NASA FMEA #: 05-60-(07), PREL REF NO. NEW [ X ] 

SUBSYSTEM: GNC 

MDAC ID: 1310 

ITEM: CIRCUIT- ATVC'S 1,2, 3, 4 POWER 

LEAD ANALYST: ROBERT O'DONNELL 

ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS CIL 

FLIGHT ITEM 

HDW/FUNC ABC 

NASA [ 3 /3 ] [ NA] [ NA] [ NA] [ ] * 

IOA [ 3 /1R ] [P] [P] [P] [] 

COMPARE [ /N ] [ N ] [ N ] [ N ] [ ] 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [)[][] C 3 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS • 

IOA FAILURE MODE: POWER CIRCUIT FAILS OPEN (OFF) DURING POWER 
TRANSFER OR PREMATURELY. 

FMEA FAILURE MODE: 1.2K CURRENT LIMITING RESISTOR (FOR MPS ATVC 
ISOL VALVE DRIVER PWR) FAILS OPEN, OUT-OF-TOLERANCE, OR SHORTED. 
THE OUT-OF-TOLERANCE AND SHORTED (ZERO RESISTANCE) FAILURE MODES 
WERE NOT CONSIDERED BY IOA SINCE THESE FAILURE MODES WOULD ALWAYS 
REFLECT A CRITICALITY OF 3/3. THE "OPEN" FAILURE REFLECTS THE 
WORST CASE CRITICALITY OF THE RESISTOR. IOA FAILURE MODE 
WAS POWER CIRCUIT FAILS OPEN (RPC'S, DIODES, AND SWITCH CIRCUIT) 
WITH WORST CASE CRITICALITY OF 3/1R. AFTER FURTHER EVALUATION OF 
SYSTEM OPERATION, IOA DOES CONCUR WITH THE CRITICALITY OF 3/3 FOR 
THE RESISTOR FAILING OPEN, AND LOSS OF ISOL VALVE 

DRIVER POWER. THE ISOL CMD FL OFF WILL INHIBIT THE ISOLATION OF 
THE CHN IF AN ATVC SYSTEM FAILURE IS DETECTED. 
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C-135 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 
ASSESSMENT ID: GNC-1310C 

NASA FMEA #: 05-60- (10) 


NASA DATA: 
BASELINE [ ] 

PREL REF NO. NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1310 

CIRCUIT- ATVC'S 1,2, 3,4 POWER 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 


CIL 

ITEM 


NASA [ 2 /1R ] [ P ] [ F ] [ P ] 

IOA [ 3 /1R ] [ P ] [ P ] [ P ] 


[ X ] * 

[ 3 


COMPARE [ N / 


[ N ] [ ] [ N ] 


RECOMMENDATIONS: (If different from NASA) 


c / ] [][][] [ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: 


REMARKS: 


(If applicable) 

ADEQUATE [ 
INADEQUATE [ 


] 

] 


IOA FAILURE MODE: POWER CIRCUIT FAILS OPEN (OFF) DURING POWER 
TRANSFER OR PREMATURELY. 

FMEA FAILURE MODE: ATVC POWER SW FAILS TO TRANSFER (OPEN) 

AFTER NASA/RI REEVALUATION OF FMEA AND FURTHER IOA EVALUATION OF 
SYSTEM OPERATION, IOA DOES CONCUR WITH THE NEW FMEA. WITH 2 ATVC 
PWR SWITCHES FAILED TO TRANSFER (OPEN) , THERE WILL EXIST A 2 ON 2 
ATVC CHN FORCE FIGHT WHICH COULD RESULT IN LOSS OF 
VEHICLE CONTROL. LOSS OF SWITCH IS NOT READILY DETECTABLE, BUT 
THE RESULTING LOSS OF RPC PWR AND ATVC CHN IS DETECTABLE. LOSS 
OF ISOL VLV DRIVER PWR NOT DETECTABLE. THE CIL WAS NOT AVAILABLE 
FOR EVALUATION OF THE RETENTION RATIONALE. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 

ASSESSMENT ID: GNC-1310D 

NASA FMEA #: 05-60-(ll), PREL REF NO. 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1310 

CIRCUIT- ATVC'S 1,2, 3, 4 POWER 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 


FLIGHT 

HDW/FUNC 

A 

B 


C 

ITEM 

NASA 

[ 3 /1R ] 

C P ] 

[ F 

] 

[ P ] 

[ X ] * 

IOA 

C 3 /1R ] 

[ P ] 

[ P 

] 

t P ] 

[ ] 

COMPARE 

[ / ] 

[ ] 

[ N 

1 

[ 1 

[ N ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ / ] 

[ ] 

[ 

] 

[ ] 

[ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS l 

IOA FAILURE MODE: POWER CIRCUIT FAILS OPEN (OFF) DURING POWER 
TRANSFER OR PREMATURELY. 

FMEA FAILURE MODE: ATVC POWER SW POLE (CONTACT) FAILS OPEN, 
SHORTED, PREMATURE OPERATION. 

AFTER NASA/RI REEVALUATION OF FMEA AND FURTHER IOA EVALUATION OF 
SYSTEM OPERATION, IOA DOES CONCUR WITH THE NEW FMEA. FOR PWR SW 
WORST CASE, 1 CONTACT FAIL OPEN (LOSS OF ISOL DRIVER), 2 CONT 
FAIL OPEN (LOSS OF PWR SUPPLY/ CHN) , 3 CONT FAIL OPEN (LOSS OF 
PWR SUPPLY WITHOUT CHN ISOLATION) . LOSS OF CONTACTS ARE NOT 
READILY DETECTABLE, BUT THE RESULTING LOSS OF RPC PWR AND ATVC 
CHN IS DETECTABLE. ISOL VLV DRIVERS ARE REDUNDANTLY POWERED IN A 
CHN. LOSS OF ISOL VLV DRIVER PWR NOT DETECTABLE. THE CIL WAS 
NOT AVAILABLE FOR EVALUATION OF THE RETENTION RATIONALE. 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 

ASSESSMENT ID: GNC-1310E 

NASA FMEA #: 05-60-(12), PREL REF NO. 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1310 

CIRCUIT- ATVC'S 1,2, 3, 4 POWER 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 


CIL 

ITEM 


NASA [ 3 /1R ] [ P ] [ P ] [ P ] 

IOA [ 3 /1R ] [ P ] [ P ] [ P ] 


[ ] * 
t ] 


COMPARE [ / 


] 


RECOMMENDATIONS: (If different from NASA) 


C / ] [][][] [ ] 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: POWER CIRCUIT FAILS OPEN (OFF) DURING POWER 
TRANSFER OR PREMATURELY. 

FMEA FAILURE MODE: RPC FAILS OPEN TO ATVC PWR SUPPLY. 

NO DIFFERENCES IN NASA/IOA ASSESSEMENT OF NEW FMEA. ONE 
REDUNDANT RPC FL OPN IS DETECTABLE ON INSTRUMENTATION. TWO 
REDUNDANT RPC'S FL OPEN ARE DETECTABLE, AND RESULTS IN CONTROL 
CHANNEL ISOLATION. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 
ASSESSMENT ID: GNC-1311 

NASA FMEA #: NONE 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1311 

CIRCUIT- ATVC'S 1,2, 3, 4 POWER 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 


NASA 

[ 

/ 

] 

[ ] 

[ ] 

[ 

] 

IOA 

[ 

3 /3 

] 

t NA] 

[ NA] 

[ 

NA] 

COMPARE 

[ 

N /N 

] 

[ N ] 

[ N ] 

[ 

N ] 


RECOMMENDATIONS: (If different from NASA) 

[3/3 ] [ NA] [ NA] [ NA] 


CIL 

ITEM 


[ ] * 

[ ] 

[ ] 


[ 1 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS l 

IOA FAILURE MODE: POWER CIRCUIT FAILS CLOSED (ON) , DURING POWER 
TRANSFER OR PREMATURELY. 

FMEA FAILURE MODE: NA 

AFTER THE FMEA REVIEW, NASA/RI DID NOT COVER THIS FAILURE MODE. 
IOA DOES RECOMMEND WRITING A NEW FMEA FOR COMPLETENESS. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


1/23/87 

GNC-1400 

05-1-FC7252-0001 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1400 

CIRCUIT-BODY FLAP CNTL 


LEAD ANALYST: ROBERT O'DONNELL 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 





ITEM 


HDW/FUNC 

A 

B 


C 


NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ 

NA1 

[ 

IOA 

[ 3 /1R ] 

[ P ] 

[ P ] 

[ 

P ] 

[ 

COMPARE 

[ /N ] 

[ N ] 

[ N ] 

[ 

N ] 

[ 

RECOMMENDATIONS : (If 

different 

from 

NASA) 




[ 3 /1R ] 

[ P ] 

[ P ] 

[ 

P ] 

[ 


* 


(ADD/ DELETE) 


* CIL RETENTION RATIONALE: 


REMARKS: 


(If applicable) 

ADEQUATE [ 
INADEQUATE [ 


] 

] 


IOA FAILURE MODE: BODY FLAP UP/DOWN SWITCH CONTACT OR CURRENT 
LIMIT RESISTOR FAILS OPEN OR SHORTED TO GROUND. 

FMEA FAILURE MODE: SWITCH FAILS TO TRANSFER, OPEN, SHORTED TO 
GROUND, INTERNAL SHORTS. 

THE BODY FLAP IS CONTROLLED BY THE AUTO/MAN MODE (PBI SW'S) AND 
THE MANUAL UP/DOWN TOGGLE SWITCHES. VEHICLE ATTITUDE CAN BE 
MAINTAINED WITH BODY FLAP IN AUTO OR MANUAL MODE. 

WITH BODY FLAP SWITCH FAILED OPEN, USE SWITCH IN OTHER CREW 
STATION OR SWITCH TO BODY FLAP AUTO MODE. 


REPORT DATE 02/03/88 


C-140 


C - 3 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


1/23/87 

GNC-1401 

05-1-FC7252-0001 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1401 

CIRCUIT-BODY FLAP CNTL 


LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 

CRITICALITY 

FLIGHT 

HDW/FUNC 

NASA [3/3 ] 

IOA [ 3 /1R ] 

COMPARE [ /N ] 

RECOMMENDATIONS : (If 

[ 3 /1R ] 


REDUNDANCY SCREENS 

ABC 

[ NA] [ NA] [ NA] 

[ P ] [ P ] [ p 3 

[ N ] [ N ] [ N ] 

different from NASA) 

[ P ] [ P 3 [ P 3 


CIL 

ITEM 


[ 1 * 

[ 3 

[ ] 


[ ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS • 

IOA FAILURE MODE: BODY FLAP UP/DOWN SWITCH CONTACT FAILS CLOSED. 
FMEA FAILURE MODE: SWITCH FAILS TO TRANSFER, OPEN, SHORTED TO 

GROUND, INTERNAL SHORTS. ____ 

THE BODY FLAP IS CONTROLLED BY THE AUTO/MAN MODE (PBI SW S) AND 
THE MANUAL UP/DOWN TOGGLE SWITCHES. VEHICLE ATTITUDE CAN BE 
MAINTAINED WITH BODY FLAP IN AUTO OR MANUAL MODE. 

WITiTbODY FLAP SWITCH FAILED IN UP POSITION, ATTITUDE CONTROL MAY 
BE LOST IN BODY FLAP MANUAL MODE. IF BODY FLAP SWITCH FAILS IN 
THE DOWN POSITION, THE OTHER CREW POSITION CAN BE USED TO DRIVE 
THE BODY FLAP UP, BUT MAY LOSE ATTITUDE 
CONTROL WITH AN INCREASE IN WORK LOAD. 


REPORT DATE 02/03/88 


C— 141 


APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 

ASSESSMENT ID: GNC-1402 

NASA FMEA #: 05-1-FC7253-0001 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1402 

CIRCUIT-BODY FLAP CNTL 


LEAD ANALYST: ROBERT O'DONNELL 

ASSESSMENT: 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


CRITICALITY 

FLIGHT 

HDW/FUNC 

NASA [3/3 ] 

IOA [ 3 /1R ] 

COMPARE [ /N ] 


REDUNDANCY SCREENS 


[ NA] 

[ P ] 

[ N ] 


B 

[ NA] 

[ P ] 

[ N ] 


[ NA] 

[ P ] 

[ N ] 


CIL 

ITEM 


] * 


[ ] 


RECOMMENDATIONS: (If different from NASA) 


[ 3 /1R ] 


C P ] 


[ P ] 


[ P ] 


[ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

REMARKS : INADEQUATE [ ] 

IOA FAILURE MODE: BODY FLAP AUTO/MAN PBI SWITCH CONTACT OR 
CURRENT LIMIT RESISTOR FAILS OPEN OR SHORTED TO GROUND. 

OPERATION^^ M0DE: SWITCH FAILS TO TRANSFER, OPEN, PREMATURE 

THE BODY FLAP IS CONTROLLED BY THE AUTO/MANUAL MODE (PBI SW'S^ 
AND THE MANUAL UP/DOWN TOGGLE SWITCHES. VEHICLE ATTITUDE CAN BE 
MAINTAINED WITH BODY FLAP IN AUTO OR MANUAL MODE. 

TP^nnSn^nr 1 ^ PBI SW FAILED 0PEN , USE PBI IN OTHER CREW STATION. 
IF BOTH PBIs FAIL OPEN, THE BODY FLAP WILL REMAIN IN THE LAST 
COMMANDED POSITION (AUTO OR MANUAL) . 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 NASA DATA: 

ASSESSMENT ID: GNC-1403 BASELINE [ ] 

NASA FMEA #: 05-1-FC7253-0001 NEW [ X ] 

SUBSYSTEM: GNC 

MDAC ID: 1403 

ITEM: CIRCUIT-BODY FLAP CNTL 

LEAD ANALYST: ROBERT O'DONNELL 


ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS CIL 

FLIGHT ITEM 

HDW/FUNC ABC 

NASA [ 3 /3 ] [ NA] [ NA] [ NA] [ ] * 

IOA [ 3 /1R ] [ P ] [ P ] t P ] [ ] 


COMPARE [ /N ] [ N ] [ N ] [ N ] [ ] 


RECOMMENDATIONS: (If different from NASA) 

[ 3 /1R ] [ P ] [ P ] [ P ] 


[ ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: BODY FLAP AUTO/MAN PBI SWITCH CONTACT FAILS 

closed • 

FMEA FAILURE MODE: SWITCH FAILS TO TRANSFER, OPEN, PREMATURE 
OPERATION. 

THE BODY FLAP IS CONTROLLED BY THE AUTO/MANUAL MODE (PBI SW'S) 

AND THE MANUAL UP/DOWN TOGGLE SWITCHES. VEHICLE ATTITUDE CAN BE 
MAINTAINED WITH BODY FLAP IN AUTO OR MANUAL MODE. 

THE SW CONTACT FAILURES ARE HANDLED BY THE STANDARD 3 CONTACT SW 
REDUNDANCY MANAGEMENT (RM) . SW RM DESELECTS FIRST FAILED CONTACT 
AND REQUIRES T HE "AND" OF TWO CONTACTS FOR AN OUTPUT. IF SW 
FAILS ON (CONTACTS SHORTED) , THE BODY FLAP CONTROL CIRCUITS 
WILL REMAIN IN THE LAST COMMANDED POSITION (AUTO OR MAN) . THE 
PBI FAILURE IN MANUAL MODE WILL CAUSE AN INCREASE IN CREW 
WORKLOAD. 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


1/23/87 
GNC-1403A 
05-1-FC72 53-0002 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1403 

CIRCUIT-BODY FLAP CNTL 


LEAD ANALYST: ROBERT O'DONNELL 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

C 


NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ 

IOA 

[ 3 /1R ] 

[ P ] 

[ P ] 

[ P ] 

[ 

COMPARE 

[ /N ] 

[ N ] 

[ N ] 

t N ] 

[ 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ 3 /1R ] [ P ] [ P ] [ P ] [ ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: 


REMARKS: 


(If applicable) 

ADEQUATE [ 
INADEQUATE [ 


] 

] 


IOA FAILURE MODE: BODY FALP AUTO/MAN PBI SWITCH CONTACT FAILS 
CLOSED. 


FMEA FAILURE MODE: INTERNAL SHORTS. 

THE BODY FLAP IS CONTROLLED BY THE AUTO/MAN MODE (PBI SW'S) AND 
THE MANUAL UP/DOWN TOGGLE SWITCHES. VEHIICLE ATTITUDE CAN BE 
MAINTAINED WITH BODY FLAP IN AUTO OR MANUAL MODE. 

WITH BODY FLAP PBI SW FAILED CLOSED, THE BODY FLAP CONTROL 
CIRCUIT WILL REMAIN IN THE LAST COMMANDED POSITION (AUTO OR MAN) 
THE PBI FAILURE IN MANUAL MODE WILL CAUSE AN INCREASE IN CREW 
WORKLOAD. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


1/23/87 

GNC-1404 

05-1-FC72 52-0001 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1404 

CIRCUIT-BODY FLAP CNTL 


LEAD ANALYST: ROBERT O'DONNELL 

ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ 

IOA 

[ 2 /1R ] 

[ P ] 

[ P ] 

[ p ] 

[ x 

COMPARE 

[ N /N ] 

[ N ] 

[ N ] 

[ N ] 

[ N 


RECOMMENDATIONS : 

[ 3 /1R ] 


(If different from NASA) 

[ P ] [ P ] [ P ] 


[ 3 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: BODY FLAP UP/DOWN CMD SWITCH JAMMED. 

NASA FAILURE MODE: FAILS TO TRANSFER, OPEN, SHORTED TO GROUND, 
INTERNAL SHORTS. 

THE BODY FLAP IS CONTROLLED BY THE AUTO/MAN MODE (PBI SW'S) AND 
THE MANUAL UP/DOWN TOGGLE SWITCHES. VEHICLE ATTITUDE CAN BE 
MAINTAINED WITH BODY FLAP IN AUTO OR MANUAL MODE. 

WITH BODY FLAP SWITCH JAMMED IN UP POSITION, ATTITUDE CONTROL MAY 
BE LOST IN BODY FLAP MANUAL MODE. WITH BODY FLAP SWITCH JAMMED 
IN DOWN POSITION, THE OTHER CREW POSITION CAN BE USED TO DRIVE 
THE BODY FLAP UP, BUT MAY LOSE ATTITUDE 
CONTROL WITH AN INCREASE IN WORK LOAD. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


3/16/87 

GNC-1501 

05-1-FC7257-0001 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


GNC 

1501 

A/B DAP PBI'S (FWD & AFT) 
K. PIETZ 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

c 


NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ ] 

IOA 

[ 3 /2R ] 

[ P 3 

[ P ] 

[ p ] 

[ ] 

COMPARE 

[ /N ] 

[ N ] 

[ N ] 

C N ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from NASA) 



[ 3 /2R ] 

[ P ] 

[ P ] 

[ P 3 

[ ] 


(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: SWITCH CONTACT FAILED CLOSED. 

FMEA FAILURE MODE: FAILS TO TRANSFER, OPEN, INTERNAL SHORT, 

PREMATURE OPERATION. 

IOA BELIEVES THAT LOSS OF ABILITY TO CHANGE MODES COULD CAUSE 
LOSS OF MISSION. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


3/16/87 

GNC-1502 

05-1-FC7257-0001 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1502 

A/B DAP PBI'S (FWD & AFT) 


LEAD ANALYST: K. PIETZ 

ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS 

FLIGHT 



HDW/FUNC 

A 

B 

C 

NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

IOA 

[ 3 /2R ] 

[ P ] 

[ P ] 

[ p ] 

COMPARE 

[ /N ] 

[ N ] 

[ N ] 

[ N ] 


CIL 

ITEM 


[ 3 * 

[ ] 

[ ] 


RECOMMENDATIONS: (If different from NASA) 

[ 3 /2R ] [ P ] [ P ] [ P ] 


[ ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS l 

IOA FAILURE MODE: SWITCH CONTACT FAILED OPEN. 

FMEA FAILURE MODE: FAILS TO TRANSFER, OPEN, INTERNAL SHORT, 

PREMATURE OPERATION. ■ TT „ 

IOA BELIEVES THAT LOSS OF ABILITY TO CHANGE MODES COULD CAUSE 

LOSS OF MISSION. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


3/16/87 

GNC-1510 

05-1-FC7258-0001 

GNC 

1510 

FWD AUTO/MAN PBI'S 
K. PIETZ 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 

HDW/FUNC 

A 

B 


C 

ITEM 

NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ 

NA1 

[ 3 
[ ] 

IOA 

[ 3 /1R ] 

[ P ] 

[ P ] 

[ 

P ] 

COMPARE 

[ /N ] 

[ N ] 

[ N ] 

[ 

N ] 

[ 3 

RECOMMENDATIONS : (If 

different 

from 

NASA) 




[ 3 /2R ] 

[ P ] 

[ P ] 

[ 

P ] 

[ 3 


(ADD/ DELETE) 


* CIL RETENTION RATIONALE: 


REMARKS: 


(If applicable) 

ADEQUATE 

INADEQUATE 


[ 

[ 


IOA FAILURE MODE: SWITCH CONTACT FAILED CLOSED. 

FMEA FAILURE MODE: FAILS TO TRANSFER OUT OF AUTO MODE 

DEPRESS , OPEN, INTERNAL SHORTS, PREMATURE OPERATION. 


] 

] 


FAILS TO 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


3/16/87 

GNC-1511 

05-1-FC7258-0001 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1511 

FWD AUTO/MAN PBI'S 


LEAD ANALYST: K. PIETZ 

ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

C 


NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

C ] * 

IOA 

[ 3 /2R ] 

[ P ] 

[ P ] 

[ p ] 

[ ] 

COMPARE 

[ /N ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ 3 /2R ] 

[ P ] 

[ P ] 

[ P ] 

[ ] 






(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: SWITCH CONTACT FAILED OPEN. 

FMEA FAILURE MODE: FAILS TO TRANSFER OUT OF AUTO MODE, FAILS TO 

DEPRESS, OPEN, INTERNAL SHORTS, PREMATURE OPERATION. 

IOA BELIEVES THAT LOSS OF ABILITY TO CHANGE MODES COULD RESULT IN 
LOSS OF MISSION. 


REPORT DATE 02/03/88 


C-149 



APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/16/87 

ASSESSMENT ID: GNC-1515 

NASA FMEA #: 05-1-FC7258-0001 

SUBSYSTEM: GNC 

MDAC ID: 1515 

ITEM: AFT AUTO/MAN PBI'S 

LEAD ANALYST: K. PIETZ 

ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

C 


NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ ] 

IOA 

[ 3 /2R ] 

[ P ] 

[ P ] 

[ p ] 

[ ] 

COMPARE 

[ /N ] 

[ N ] 

( N ] 

[ N ] 

[ ] 


RECOMMENDATIONS: (If different from NASA) 

[ 3 /2R ] [ P ] [ P ] [ P ] [ ] 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ 1 

REMARKS: 

IOA FAILURE MODE: SWITCH CONTACT FAILED CLOSED. 

FMEA FAILURE MODE: FAILS TO TRANSFER OUT OF AUTO MODE, FAILS TO 

DEPRESS, OPEN INTERNAL SHORTS, PREMATURE OPERATION. 

IOA BELIEVES THAT IX5SS OF ABILITY TO CHANGE MODES COULD RESULT IN 
LOSS OF MISSION. 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


REPORT DATE 02/03/88 


C-150 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/16/87 NASA DATA: 

ASSESSMENT ID: GNC-1516 BASELINE [ ] 

NASA FMEA #: 05-1-FC7258-0001 NEW [ X ] 

SUBSYSTEM: GNC 

MDAC ID: 1516 

ITEM: AFT AUTO/MAN PBI'S 

LEAD ANALYST: K. PIETZ 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

C 


NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ ] * 

IOA 

[ 3 /2R ] 

[ P ] 

[ P 1 

[ P ] 

[ 1 

COMPARE 

[ /N ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ 3 /2R ] 

[ P ] 

[ P ] 

[ P 3 

[ ] 






(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS I 

IOA FAILURE MODE: SWITCH CONTACT FAILED OPEN. 

FMEA FAILURE MODE: FAILS TO TRANSFER OUT OF AUTO MODE, FAILS TO 

DEPRESS, OPEN, INTERNAL SHORTS, PREMATURE OPERATION. 

IOA BELIEVES THAT LOSS OF ABILITY TO CHANGE MODES COULD RESULT IN 
LOSS OF MISSION. 


REPORT DATE 02/03/88 


C-151 



APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


3/16/87 
GNC-1520 
05-1-FC72 59-0 001 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1520 

NORM/VE RN PBI'S (FWD & AFT) 


LEAD ANALYST: K. PIETZ 

ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

C 


NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ 

IOA 

[ 3 /2R ] 

[ P 3 

[ P ] 

[ P 3 

[ 

COMPARE 

[ /N ] 

[ N ] 

[ N ] 

[ N ] 

[ 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ 3 /2R ] [ P ] [ P ] [ P ] [ ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: 


REMARKS: 


(If applicable) 

ADEQUATE [ 
INADEQUATE [ 


] 

] 


IOA FAILURE MODE: SWITCH CONTACT FAILED CLOSED. 

FMEA FAILURE MODE: FAILS TO TRANSFER OUT OF VENIER MODE. FAILS 

TO DEPRESS, OPEN, INTERNAL SHORT, PREMATURE OPERATION. 

IOA BELIEVES THAT LOSS OF ABILITY TO CHANGE MODES COULD CAUSE 
LOSS OF MISSION. 


REPORT DATE 02/03/88 


C-152 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/16/87 NASA DATA: 

ASSESSMENT ID: GNC-1521 BASELINE [ ] 

NASA FMEA #: 05-1-FC7259-0001 NEW [ A ] 

SUBSYSTEM: GNC 

MDAC ID: 1521 

ITEM: NORM/VERN PBI'S (FWD & AFT) 

LEAD ANALYST: K. PIETZ 

ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 

NASA [ 3 /3 ] [ NA] [ NA] [ NA] 

IOA [ 3 /2R ] [ P ] [ P ] [ P ] 

COMPARE [ /N ] [ N ] [ N ] [ N ] 


RECOMMENDATIONS: (If different from NASA) 

[ 3 /2R ] [P] [P] [P] [] 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: SWITCH CONTACT FAILED OPEN. 

FMEA FAILURE MODE: FAILS TO TRANSFER OUT OF VERNIER MODE, FAILS 

TO DEPRESS, OPEN, INTERNAL SHORT, PREMATURE OPERATION. 

IOA BELIEVES THAT LOSS OF ABILITY TO CHANGE MODES COULD CAUSE 
LOSS OF MISSION. 


CIL 

ITEM 


[ ] * 

[ ] 

[ ] 


REPORT DATE 02/03/88 


C-153 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


3/16/87 

GNC-1530 

05-1-FC72 61-0001 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1530 

FWD DISC RATE ROT PBI'S 


LEAD ANALYST: K. PIETZ 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ 

IOA [ 3 /2R ] 

[ P ] 

[ P ] 

[ p ] 

[ 

COMPARE [ /N ] 

[ N ] 

[ N ] 

[ N ) 

[ 


RECOMMENDATIONS: (If different from NASA) 

[ 3 /2R ] [ P ] [ P ] [ P ] [ ] 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: SWITCH CONTACT FAILED CLOSED. 

FMEA FAILURE MODE: FAILS TO TRANSFER, OPEN, INTERNAL SHORT, 

PREMATURE OPERATION. 

IOA BELIEVES THAT LOSS OF ABILITY TO CHANGE MODES COULD RESULT IN 
LOSS OF MISSION. 


REPORT DATE 02/03/88 


C-154 



APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


3/16/87 

GNC-1531 

05-1-FC7261-0001A 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1531 

FWD DISC RATE ROT PBI'S 


LEAD ANALYST: K. PIETZ 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

FLIGHT 




HDW/FUNC 

A 

B 

C 

NASA [3/3 ] 

[ NA] 

[ NA] 

[ NA] 

IOA [ 3 /2R ] 

[ P ] 

[ P ] 

[ p ] 

COMPARE [ /N ] 

[ N ] 

[ N ] 

[ N ] 


RECOMMENDATIONS: (If different from NASA) 

[ 3 /2R ] [ P ] [ P ] [ P ] 


CIL 

ITEM 


[ ] * 

[ ] 

[ ] 


[ ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: SWITCH CONTACT FAILED OPEN. 

FMEA FAILURE MODE: FAILS TO TRANSFER, OPEN, INTERNAL SHORT, 

PREMATURE OPERATION. 

IOA BELIEVES THAT LOSS OF ABILITY TO CHANGE MODES COULD RESULT IN 
LOSS OF MISSION. 


REPORT DATE 02/03/88 


C-155 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/16/87 

ASSESSMENT ID: GNC-1535 

NASA FMEA #: 05-1-FC7261-0001 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1535 

FWD PULSE ROT PBI'S 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


LEAD ANALYST: K. PIETZ 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 


C 

ITEM 

NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ 

NA] 

[ ] * 
[ ] 

IOA 

[ 3 /2R ] 

C P ] 

[ P ] 

[ 

P ] 

COMPARE 

[ /N ] 

[ N ] 

[ N ] 

[ 

N ] 

[ ] 

RECOMMENDATIONS : 

(If different 

from 

NASA) 




[ 3 /2R ] 

[ P ] 

[ P ] 

[ 

P ] 

[ ] 


(ADD/ DELETE) 


* CIL RETENTION RATIONALE: 


REMARKS: 


(If applicable) 

ADEQUATE [ 
INADEQUATE [ 


] 

] 


IOA FAILURE MODE: SWITCH CONTACT FAILED CLOSED. 

FMEA FAILURE MODE: FAILS TO TRANSFER, OPEN, INTERNAL SHORT 

PREMATURE OPERATION. 

IOA BELIEVES THAT LOSS OF ABILITY TO CHANGE MODES COULD RESULT 
LOSS OF MISSION. 


REPORT DATE 02/03/88 


C-156 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


3/16/87 
GNC-1536 
05-1-FC7 2 61-0001 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1536 

FWD PULSE ROT PBI'S 


LEAD ANALYST: K. PIETZ 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ ] 

IOA [ 3 /2R ] 

[ P 1 

[ P ] 

[ P ] 

[ ] 

COMPARE [ /N ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 


RECOMMENDATIONS: (If different from NASA) 


[ 3 /2R ] [ P ] [ P ] [ P 3 


[ 1 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS l 

IOA FAILURE MODE: SWITCH CONTACT FAILED OPEN. 

FMEA FAILURE MODE: FAILS TO TRANSFER, OPEN, INTERNAL SHORT, 

PREMATURE OPERATION. 

IOA BE LI EVES THAT LOSS OF ABILITY TO CHANGE MODES COULD RESULT IN 
LOSS OF MISSION. 


REPORT DATE 02/03/88 


C-157 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/16/87 

ASSESSMENT ID: GNC-1540 

NASA FMEA #: 05-1-FC7261-0001 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1540 

AFT DISC RATE ROT PBI‘S 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


LEAD ANALYST: K. PIETZ 

ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 


FLIGHT 





HDW/FUNC 

A 

B 

c 

NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

IOA 

[ 3 /2R ] 

[ P 3 

[ P 3 

[ P 3 

COMPARE 

[ /N ] 

[ N ] 

[ N ] 

[ N ) 

RECOMMENDATIONS : (If 

different 

from 

NASA) 


[ 3 /2R ] 

[ P 3 

[ P 3 

[ P 3 


CIL 

ITEM 


[ 3 * 

[ 3 

C 3 


[ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: 
REMARKS: 


(If applicable) 

ADEQUATE [ 
INADEQUATE [ 


3 

3 


IOA FAILURE MODE: SWITCH CONTACT FAILE CLOSED. 

FMEA FAILURE MODE: FAILS TO TRANSFER, OPEN, INTERNAL SHORT 

PREMATURE OPERATION. 

IOA BELIEVES THAT LOSS OF ABILITY TO CHANGE MODES COULD RESULT 
LOSS OF MISSION. 


REPORT DATE 02/03/88 


C-158 



APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


3/16/87 

GNC-1541 

05-1-FC7261-0001 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1541 

AFT DISC RATE ROT PBI’S 


LEAD ANALYST: K. PIETZ 


ASSESSMENT: 

CRITICALITY 

FLIGHT 

HDW/FUNC 

NASA [3/3 ] 

IOA [ 3 /2R ] 

COMPARE [ /N ] 


REDUNDANCY SCREENS 

ABC 

[ NA] [ NA] [ NA] 

[ P ] [ P ] t P 3 

[ N ] [ N ] [ N ] 


CIL 

ITEM 


[ ] * 

[ ] 

[ ] 


RECOMMENDATIONS: (If different from NASA) 

[ 3 /2R ] [ P ] [ P ] t p 


[ ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS l 

IOA FAILURE MODE: SWITCH CONTACT FAILED OPEN. 

FMEA FAILURE MODE: FAILS TO TRANSFER, OPEN, INTERNAL SHORT, 

PREMATURE OPERATION. m „„ 

IOA BELIEVES THAT LOSS OF ABILITY TO CHANGE MODES COULD RESULT IN 

LOSS OF MISSION. 


REPORT DATE 02/03/88 


C-159 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/16/87 

ASSESSMENT ID: GNC-1545 

NASA FMEA #: 05-1-FC7261-0001 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1545 

AFT PULSE ROT PBI'S 


LEAD ANALYST: K. PIETZ 


ASSESSMENT: 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 



CRITICALITY 

FLIGHT 

HDW/FUNC 

REDUNDANCY SCREENS 
ABC 

CIL 

ITEM 

NASA 

IOA 

[3/3 ] 

[ 3 /2R ] 

[ NA] 
[ P ] 

[ NA] 

[ P ] 

[ NA] 

[ P ] 

[ 

[ 

COMPARE 

C /N ] 

[ N ] 

[ N ] 

[ N ] 

[ 


RECOMMENDATIONS: (If different from NASA) 


[ 3 /2R ] [ P ] [ P ] [ P ] 


[ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: 


REMARKS: 


(If applicable) 

ADEQUATE [ 
INADEQUATE [ 


] 

] 


IOA FAILURE MODE: SWITCH CONTACT FAILED CLOSED. 

FMEA FAILURE MODE: FAILS TO TRANSFER, OPEN, INTERNAL SHORT 

PREMATAURE OPERATION. HUK1 ' 

?£oe B ^ I ^? T THAT loss 0F ABILITY TO CHANGE MODES COULD RESULT IN 

IjOSo of mxssxon. 


REPORT DATE 02/03/88 


C-160 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/16/87 NASA DATA: 

ASSESSMENT ID: GNC-1546 BASELINE [ ] 

NASA FMEA #: 05-1-FC7261-0001 NEW [ X ] 

SUBSYSTEM: GNC 

MDAC ID: 1546 

ITEM: AFT PULSE ROT PBI'S 

LEAD ANALYST: K. PIETZ 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

C 


NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ ] * 

IOA 

[ 3 /2R ] 

[ P ] 

[ P ] 

[ p ] 

[ 3 

COMPARE 

[ /N ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ 3 /2R ] 

[ P ] 

[ P 3 

[ P ] 

[ 1 






(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS I 

IOA FAILURE MODE: SWITCH CONTACT FAILED OPEN. 

FMEA FAILURE MODE: FAILS TO TRANSFER, OPEN, INTERNAL SHORT, 

PREMATURE OPERATION. 

IOA BELIEVES THAT LOSS OF ABILITY TO CHANGE MODES COULD RESULT IN 
LOSS OF MISSION. 


REPORT DATE 02/03/88 


C-161 



APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE 
ASSESSMENT ID: 
NASA FMEA #: 


3/16/87 

GNC-1550 

05-1-FC72 6 1-0001 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1550 

ACCEL ROT PBI'S (FWD & AFT) 


LEAD ANALYST: K. PIETZ 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 

HDW/FUNC 

A 

B 


C 

ITEM 

NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ 

NA] 

[ ] 
[ ] 

IOA 

[ 3 /2R ] 

[ P ] 

[ P 3 

[ 

P ] 

COMPARE 

[ /N ] 

[ N ] 

[ N ] 

[ 

N ] 

[ ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 




[ 3 /2R ] 

[ P ] 

[ P ] 

[ 

P ] 

[ ] 


(ADD/ DELETE) 


* CIL RETENTION RATIONALE: 


REMARKS: 


(If applicable) 

ADEQUATE [ 
INADEQUATE [ 


] 

] 


IOA FAILURE MODE: SWITCH CONTACT FAILED CLOSED. 

FMEA FAILURE MODE: FAILS TO TRANSFER, OPEN, INTERNAL SHORT 

PREMATURE OPERATION. 

IOA BELIEVES THAT LOSS OF ABILITY TO CHANGE MODES COULD RESULT 
LOSS OF MISSION. 


REPORT DATE 02/03/88 


C-162 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/16/87 
ASSESSMENT ID: GNC-1551 

NASA FMEA #: 


05-1-FC7261-0001 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


GNC 

1551 

ACCEL ROT PBI 1 S (FWD & AFT) 
K. PIETZ 



CRITICALITY 

REDUNDANCY SCREENS 


FLIGHT 





HDW/FUNC 

A 

B 

C 

NASA 

[3/3 ] 

[ NA] 

[ NA] 

t NA] 

IOA 

[ 3 /2R ] 

[ P ] 

[ P ] 

[ p ] 

COMPARE 

[ /N ] 

[ N ] 

[ N ] 

[ N ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 


[ 3 /2R ] 

[ P ] 

[ P 1 

[ P 3 


CIL 

ITEM 


] * 

] 


[ 1 


[ 1 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: SWITCH CONTACT FAILED OPEN. 

FMEA FAILURE MODE: FAILS TO TRANSFER, OPEN, INTERNAL SHORT, 

PREMATURE OPERATION. 

IOA BELIEVES THAT LOSS OF ABILITY TO CHANGE MODES COULD RESULT IN 
LOSS OF MISSION. 


REPORT DATE 02/03/88 


C-163 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


3/16/87 

GNC-1560 

05-1-FC7260-0001 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1560 

TRANSLATION PBI'S (FWD & AFT) 


LEAD ANALYST: K. PIETZ 

ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 

FLIGHT ITEM 



HDW/FUNC 

A 

B 


C 




NASA 

[ 3 

/3 

] 

[ NA] 

[ NA] 

[ NA] 

[ 

] * 

IOA 

[ 3 

/2R 

] 

[ P ] 

[ P 

] 

C p 

] 

[ 

] 

COMPARE 

[ 

/N 

] 

[ N ] 

[ N 

] 

[ N 

] 

C 

] 


RECOMMENDATIONS: (If different from NASA) 

[ 3 /2R ] [ P ] [ P ] [ P ] [ ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: SWITCH CONTACT FAILED CLOSED. 

FMEA FAILURE MODE: FAILS TO TRANSFER, OPEN, INTERNAL SHORT, 

PREMATURE OPERATION. 

IOA BELIEVES THAT LOSS OF ABILITY TO CHANGE MODES COULD CAUSE 
LOSS OF MISSION. 


REPORT DATE 02/03/88 


C— 164 


APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


3/16/87 

GNC-1561 

05-1-FC72 60-0001 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1561 

TRANSLATION PBI'S (FWD & AFT) 


LEAD ANALYST: K. PIETZ 

ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ 

IOA 

[ 3 /2R ] 

[ P 3 

[ P ] 

[ p ] 

[ 

COMPARE 

[ /N ] 

[ N ] 

[ N ] 

[ N ] 

[ 


RECOMMENDATIONS: (If different from NASA) 

[ 3 /2R ] [ P ] [ P ] [ P ] [ ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: SWITCH CONTACT FAILED OPEN. 

FMEA FAILURE MODE: FAILS TO TRANSFER, OPEN, INTERNAL SHORT, 

PREMATURE OPERATION? FAILS TO TRANSFER INTO LVLH, FAILS TO 
TRANSFER INTO LOW Z. 

IOA BELIEVES THAT LOSS OF ABILITY TO CHANGE MODES COULD RESULT IN 
LOSS OF MISSION. NASA RATES ONLY "FAILS TO TRANSFER INTO LOW Z 
AS 3/2R. 


REPORT DATE 02/03/88 


C-165 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/16/87 
ASSESSMENT ID: GNC-1561B 

NASA FMEA #: 05-l-(TBD06) 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1561 

TRANSLATION PBI'S (FWD & AFT) 


LEAD ANALYST: K. PIETZ 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

IOA 

[3/3 ] 

[ 3 /2R ] 

[ NA] 

[ P ] 

[ NA] 
[ P 3 

[ NA] 

[ P ] 

[ ] 
[ 3 

COMPARE 

[ /N ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 

RECOMMENDATIONS : 

(If different 

from NASA) 



[ 3 /2R ] 

[ P ] 

[ P ] 

[ P ] 

[ ] 


(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: SWITCH CONTACT FAILED OPEN. 

FMEA FAILURE MODE: SW MAN MODE LVLH: FAILS TO TRANSFER TO THE 

LVLH MODE, OPEN. 

IOA BELIEVES THAT LOSS OF ABILITY TO CHANGE MODES COULD RESULT IN 
LOSS OF MISSION. NASA RATES ONLY "FAILS TO TRANSFER INTO LOW Z 
AS 3/2R. 


REPORT DATE 02/03/88 


C-166 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/16/87 
ASSESSMENT ID: GNC-1561A 

NASA FMEA #: 


05-1 - (TBD03 ) 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


GNC 

1561 

TRANSLATION PBI'S (FWD & AFT) 
K. PIETZ 


CRITICALITY 

FLIGHT 

HDW/FUNC 

NASA [ 3 /2R ] 

IOA [ 3 /2R ] 

COMPARE [ / ] 


REDUNDANCY SCREENS 


[ P 3 
[ P 3 

[ 3 


B 

[ P 3 
[ P 3 

[ 3 


[ P 3 
[ P 3 

[ 3 


CIL 

ITEM 


3 * 

3 


[ 3 


RECOMMENDATIONS : 

[ / 3 


(If different from NASA) 

[ 3 C 3 [ 


* CIL RETENTION RATIONALE: (If applicable) 


[ 3 

(ADD/ DELETE) 


ADEQUATE [ ] 

INADEQUATE [ ] 


FAILS TO 


REMARKS 1 

IOA FAILURE MODE: SWITCH CONTACT FAILED OPEN. 

FMEA FAILURE MODE: SW MAN MODE LOW Z TRANSLATION: 

TRANSFER INTO LOW Z , OPEN , INTERNAL SHORTS . 

IOA BELIEVES THAT LOSS OF ABILITY TO CHANGE MODES COULD RESULT IN 
LOSS OF MISSION. NASA RATES ONLY "FAILS TO TRANSFER INTO LOW Z 

AS 3/2R. 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/16/87 
ASSESSMENT ID: GNC-1570 

NASA FMEA #: 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


05-1-FC72 57-0001 

GNC 

1570 

A/B PBI'S (FWD & AFT) 
K. PIETZ 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 



CRITICALITY 

REDUNDANCY SCREENS 


FLIGHT 

HDW/FUNC 

A 

B C 

NASA 

[3/3 ] 

[ NA] 

[ NA] [ NA] 

[ P ] [ P ] 

IOA 

[ 3 /2R ] 

[ P ] 

COMPARE 

C /N ] 

[ N ] 

[ N ] [ N ] 


RECOMMENDATIONS: (If different from NASA) 

[ 3 /2R ] t P ] [ P ] [ p ] 


CIL 

ITEM 


] * 

] 


C ] 


[ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

REMARKS : INADEQUATE [ ] 

MODE: PBI STUCK IN DEPRESSED POSITION. 

FMEA FAILURE MODE: FAILS TO TRANFER, OPEN, INTERNAL SHORT 

PREMATURE OPERATION. fcKflAL. SHORT, 

LOSS ^OF^MIS S I ON^ T L ° SS ° F ABILITY T0 CHANGE MODES COULD CAUSE 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


3/16/87 

GNC-1575 

05-1-FC7258-0001 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1575 

FWD AUTO PBI 


LEAD ANALYST: K. PIETZ 

ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

C 


NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ 

IOA 

[2/2 ] 

[ P ] 

[ P ] 

[ p ] 

[ x 

COMPARE 

[ N /N ] 

[ N ] 

[ N ] 

[ N ] 

[ N 


RECOMMENDATIONS: (If different from NASA) 

[ 3 /2R ] [ P ] [ P ] [ P ] 


[ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS * 

IOA FAILURE MODE: PBI STUCK IN DEPRESSED POSITION. 

FMEA FAILURE MODE: FAILS TO TRANSFER OUT OF AUTO MODE, FAILS TO 

DEPRESS, OPEN, PREMATURE OPERATION. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/16/87 
ASSESSMENT ID: GNC-1576 

NASA FMEA #: 05-l-(TBDOl) 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1576 

FWD MAN PBI 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


LEAD ANALYST: K. PIETZ 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

c 


NASA 

[2/2 ] 

t NA] 

[ NA] 

[ NA] 

[ x 

IOA 

[2/2 ] 

[ P ] 

[ P 3 

[ P 3 

[ x 

COMPARE 

[ / ] 

[ N ] 

[ N ] 

[ N ] 

[ 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ / ] 

[ ] 

[ ] 

[ 3 

[ 


(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 


REMARKS: 

IOA FAILURE MODE: 
FMEA FAILURE MODE: 


ADEQUATE 

INADEQUATE 

PBI STUCK IN DEPRESSED POSITION. 
FAILS TO TRANSFER OUT OF MANUAL 


C X ] 
[ ] 

MODE. 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/17/87 NASA DATA: 

ASSESSMENT ID: GNC-1577 BASELINE [ ] 

NASA FMEA #: 05-1-FC7258-0001 NEW [ X ] 

SUBSYSTEM: GNC 

MDAC ID: 1577 

ITEM: AFT AUTO/MAN PBI'S 

LEAD ANALYST: K. PIETZ 

ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 

NASA [3/3 ] [ NA] [ NA] [ NA] 

IOA [ 2 /2 ] [ P ] [ P ] [ P ] 

COMPARE [ N /N ] [ N ] [ N ] [ N ] 


RECOMMENDATIONS: (If different from NASA) 

[ 3 /2R ] [ P ] [ P ] [ P ) [ ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS * 

IOA FAILURE MODE: PBI STUCK IN DEPRESSED POSITION. 

FMEA FAILURE MODES: FAILS TO TRANSFER OUT OF AUTO MODE, FAILS TO 

DEPRESSION, INTERNAL SHORTS, PREMAUTRE OPERATION, FAILS TO 
TRANSFER OUT OF MAN. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 


3/17/87 
GNC-1580 
05-1- (TB002 ) 

GNC 

1580 

NORM/VERN PBI'S (FWD 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


AFT) 


LEAD ANALYST: K. PIETZ 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [2/2 ] 

[ NA] 

[ NA] 

[ NA] 

[ X ] 

IOA [2/2 ] 

[ P ] 

[ P ] 

[ p ] 

[ X ] 

COMPARE [ / ] 

[ N ] 

[ N ] 

[ N ] 

[ ] 


RECOMMENDATIONS: (If different from NASA) 

C / 1 [][][] [ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ X ] 
INADEQUATE [ 1 

REMARKS: 

IOA FAILURE MODE: PBI STUCK IN DEPRESSED POSITION. 

FMEA FAILURE MODE: FAILS TO TRANSFER OUT OF NORMAL. 

NOT EXACT MATCH: IOA BELIEVES THAT LOSS OF EITHER NORMAL OR VERN 

COULD CAUSE LOSS OF MISSION. 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


3/17/87 

GNC-1581 

05-1-FC72 6 1-0001 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1581 

FWD PULSE & D RATE ROT PBI'S 


LEAD ANALYST: K. PIETZ 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ 

IOA [2/2 ] 

[ P ] 

[ P ] 

[ p ] 

[ x 

COMPARE [ N /N ] 

[ N ] 

[ N ] 

[ N ] 

[ N 


RECOMMENDATIONS: (If different from NASA) 

[ 3 /2R ] [ P ] [ P ] [ P ] [ ] 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: PBI STUCK IN DEPRESSED POSITION. 

FMEA FAILURE MODE: FAILS TO TRANSFER, OPEN, INTERNAL SHORT, 

PREMATURE OPERATION. 

IOA BELIEVES THAT HAVING ONE MODE PERMANTENTLY SELECTED COULD 
CAUSE LOSS OF MISSION. 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/17/87 NASA DATA: 

ASSESSMENT ID: GNC-1582 BASELINE [ ] 

NASA FMEA #: 05-1-FC7261-0001 NEW [ X ] 

SUBSYSTEM: GNC 

MDAC ID: 1582 

ITEM: AFT PULSE & D RATE ROT PBI'S 

LEAD ANALYST: K. PIETZ 

ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FXJNC 

A 

B 

C 


NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

C ] 

IOA 

[2/2 ] 

[ P ] 

[ P ] 

[ P ] 

[ X ] 

COMPARE 

[ N /N ] 

[ N ] 

[ N ] 

[ N ] 

[ N ] 


RECOMMENDATIONS: (If different from NASA) 

[ 2 /2 ] [ NA] [ NA] [ NA] [ A ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: PBI STUCK IN DEPRESSED POSITION. 

FMEA FAILURE MODE: FAILS TO TRANSFER, OPEN, INTERNAL SHORT, 

PREMAUTRE OPERATION. 

IOA BELIEVES THAT HAVING ONE MODE PREMANENTLY SELECTED COULD 
CAUSE LOSS OF MISSION. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


3/17/87 

GNC-1585 

05-1-FC7261-0001 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1585 

ACCEL ROT PBI'S (FWD & AFT) 


LEAD ANALYST: K. PIETZ 

ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ ] 

IOA [2/2 ] 

[ P ] 

[ P ] 

[ p ] 

[ x ] 

COMPARE [ N /N ] 

[ N ] 

[ N ] 

[ N ] 

[ N ] 


RECOMMENDATIONS: (If different from NASA) 

[2/2 ] [ NA] [ NA] [ NA) 


[ A ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS l 

IOA FAILURE MODE: PBI STUCK IN DEPRESSED POSITION. 

FMEA FAILURE MODE: FAILS TO TRANSFER, OPEN, INTERNAL SHORT, 

PREMATURE OPERATION. 

IOA BELIEVES THAT HAVING ONE MODE PERMANENTLY SELECTED COULD 
CAUSE LOSS OF MISSION. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/17/87 

ASSESSMENT ID: GNC-1586 

NASA FMEA #: 05-1-FC7260-0001 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: GNC 

MDAC ID: 1586 

ITEM: TRANSLATION PBI'S (FWD & AFT) 


LEAD ANALYST: K. PIETZ 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS 

FLIGHT 



HDW/FUNC 

A 

B 

C 

NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

IOA 

[2/2 ] 

[ P ] 

[ P ] 

[ p ] 

COMPARE 

[ N /N ] 

[ N ] 

[ N ] 

[ N ] 


CIL 

ITEM 


[ ] * 

t X ] 

[ N ] 


RECOMMENDATIONS: (If different from NASA) 


[2/2 ] [ NA] [ NA] [ NA] [ X ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: 
REMARKS: 


(If applicable) 

ADEQUATE [ 
INADEQUATE [ 


] 

] 


IOA FAILURE MODE: 
FMEA FAILURE MODE: 
PREMATURE OPERATION 
TRANSFER OUT OF LOW 


PBI STUCK IN DEPRESSED POSITION. 

FAILS TO TRANSFER, OPEN, INTERNAL SHORT, 
, FAILS TO TRANSFER OUT OF LVLH, FAILS TO 
Z. 


NASA FINDS ONLY "FAILS TO TRANSFER OUT OF LVLH" TO BE 2/2. IOA 
BELIEVES THAT HAVING ANY POSITION PERMANENTLY SELECTED COULD 
CAUSE LOSS OF MISSION. U 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/17/87 
ASSESSMENT ID: GNC-1586A 

NASA FMEA #: 05-l-(TBD04) 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1586 

TRANSLATION PBI'S (FWD & AFT) 


LEAD ANALYST: K. PIETZ 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ ] 

IOA [2/2 ] 

[ P ] 

[ P ] 

[ p ] 

[ x ] 

COMPARE [ N /N ] 

[ N ] 

[ N ] 

[ N ) 

[ N ] 


RECOMMENDATIONS: (If different from NASA) 

[ 2 /2 ] [ NA] [ NA] [ NA] [ X ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: PBI STUCK IN DEPRESSED POSITION. 

FMEA FAILURE MODE: SW MAN MODE LOW Z TRANSLATION: FAILS TO 

TRANSFER OUT OF LOW Z, PREMATURE OPERATION, SHOCK. 

NASA FINDS ONLY "FAILS TO TRANSFER OUT OF LVLH" TO BE 2/2. IOA 
BELIEVES THAT HAVING ANY POSITION PERMANENTLY SELECTED COULD 
CAUSE LOSS OF MISSION./ 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


3/17/87 
GNC-1586B 
05-1- (TBD05) 

GNC 

1586 

TRANSLATION PBI'S 
K. PIETZ 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


& AFT) 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [2/2 ] 

[ NA] 

[ NA] 

[ NA] 

[ ] 

IOA [2/2 ] 

[ p ] 

[ P ] 

[ p ] 

[ 3 

COMPARE [ / ] 

[ N ] 

[ N ] 

[ N ] 

[ 3 

RECOMMENDATIONS : (If 

different 

from NASA) 


[ / ] 

[ ] 

[ ] 

[ ] 

[ 3 


(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: PBI STUCK IN DEPRESSED POSITION. 

FMEA FAILURE MODE: SW, MAN MODE LVLH: FAILS TO TRANSFER OUT OF 

LVLH MODE, PREMATURE OPERATION, SHORT. 

NASA FINDS ONLY M FAILS TO TRANSFER OUT OF LVLH" TO BE 2/2. IOA 
BELIEVES THAT HAVING ANY POSITION PERMANENTLY SELECTED COULD 
CAUSE LOSS OF MISSION./ 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


12/23/86 

GNC-1590 

05-60-200800-0001 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1590 

FC ANNUNCIATOR CIRCUIT 


LEAD ANALYST: K. PIETZ 


ASSESSMENT: 

CRITICALITY 

FLIGHT 

HDW/FUNC 

NASA [3/3 ] 

IOA [3/3 ] 

COMPARE [ / ] 


REDUNDANCY SCREENS 


A 

[ NA] 
[ NA] 

[ ] 


B 

[ NA] 
[ NA] 

[ 1 


C 

[ NA] 
[ NA] 

[ 3 


RECOMMENDATIONS: (If different from NASA) 


[ / ] [3 C 3 C 3 


CIL 

ITEM 


[ ] * 

[ 3 

[ ] 


[ 3 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ J 

INADEQUATE [ ] 

REM ARKS * 

IOA FAILURE MODE "NO OUTPUT” IS INCLUDED IN NASA FAILURE MODE 
"ALL CREDIBLE MODES". NO OTHER DIFFERENCES. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 12/23/86 
ASSESSMENT ID: GNC-1591 

NASA FMEA #: 05-60-200800-0001 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1591 

FC ANNUNCIATOR CIRCUIT 


LEAD ANALYST: K. PIETZ 


ASSESSMENT: 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


CRITICALITY 

FLIGHT 

HDW/FUNC 

NASA [3/3 ] 

IOA [3/3 ] 

COMPARE [ / ] 


REDUNDANCY SCREENS 

A B C 

[ NA] [ NA] [ NA] 

[ NA] [ NA] [ NA] 

t ] C ] [ ] 


CIL 

ITEM 


[ ] * 
C ] 

[ ] 


RECOMMENDATIONS: (if different from NASA) 


t / 


[ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE 

REMARKS : INADEQUATE 

IOA FAILURE MODE "INADVERTENT OUTPUT" IS INCLUDED I* 
MODE "ALL CREDIBLE MODES". NO OTHER DIFFERENCES. 


[ ] 

[ ] 

NASA FAILURE 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


12/23/86 

GNC-1593 

05-60-200800-0001 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1593 

FC ANNUNCIATOR CIRCUIT 


LEAD ANALYST: K. PIETZ 

ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS 

FLIGHT 



HDW/FUNC 

A 

B 

C 

NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

IOA 

[ 3 /1R ] 

[ P ] 

[ P ] 

[ p ] 

COMPARE 

[ /N ] 

[ N ] 

[ N ] 

[ N ] 


RECOMMENDATIONS: (If different from NASA) 

[ 3 /1R ] [ P ] [ P ] [ P ] 


CIL 

ITEM 


[ ] * 

[ ] 

[ ] 


[ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS Z 

NASA DID NOT DIRECTLY ADDRESS THIS FAILURE MODE. LOSS OF 
FUNCTION OF ONE ACA (ANNUNCIATOR CONTROL ASSEMBLY) WOULD NOT BE 
CRITICAL, BUT LOSS OF FUNCTION OF ALL FIVE ACAs COULD JEOPARDIZE 
CREW/VEHICLE. 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


3/23/87 
GNC-1601 
05-1-FC7 2 50-0001 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1601 

ENTRY MODE SWITCH CIRCUIT 


LEAD ANALYST: J.M. HIOTT 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

C 


NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ 

IOA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ 

COMPARE 

[ / ) 

C ] 

[ ] 

t ] 

[ 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ / ] 

[ ] 

[ ] 

[ ] 

[ 


(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: ERRONEOUS OUTPUT (INCORRECT NUMBER OF CONTACTS 
ENERGIZED) . 

FMEA FAILURE MODE: ALL CREDIBLE MODES - FAILURE TO TRANSFER, 
SHORTED. 

NO ACTION REQUIRED - RESULTS ARE THE SAME. 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


3/23/87 

GNC-1602 

05-1-FC7250-0001 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1602 

ENTRY MODE SWITCH CIRCUIT 


LEAD ANALYST: J.M. HIOTT 

ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS 

FLIGHT 



HDW/FUNC A 

B 


C 

NASA 

[ 3 /3 

] [ NA] 

[ NA] 

[ 

NA] 

IOA 

[ 3 /3 

] [ NA] 

[ NA] 

[ 

NA] 

COMPARE 

C / 

] [ ] 

[ ] 

C 

3 

RECOMMENDATIONS : 

(If different 

from 

NASA) 



[ / 

] [ 3 

[ ] 

[ 

3 


CIL 

ITEM 


[ ] * 

[ ] 

[ ] 


[ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: JAMMED SWITCH. 

FMEA FAILURE MODE: ALL CREDIBLE MODES - FAILURE TO TRANSFER, 
SHORTED. 

NO ACTION REQUIRED - RESULTS ARE THE SAME. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 
ASSESSMENT ID: GNC-1801 

NASA FMEA #: 05-6-2659-2 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1801 

ABORT MODE SWITCH CIRCUIT 


LEAD ANALYST: J.M. HIOTT 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

c 


NASA 

[ 3 /1R ] 

[ NA] 

[ NA] 

[ NA] 

[ 

IOA 

t 3 /1R ] 

t P ] 

[ P 1 

[ p ] 

[ 

COMPARE 

t / ] 

[ N ] 

[ N ] 

t N ] 

[ 

RECOMMENDATIONS : (If 

different 

from NASA) 



[ / ] 

[ ] 

[ ] 

[ ] 

[ 


* 


(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: ABORT MODE PUSHBUTTON OR ABORT MODE ROTARY 
SWITCH CONTACT FAILED OPEN OR RESISTOR A1R1, A1R2 , A1R3 SHORTED 
TO GROUND. 

FMEA FAILURE MODE: PUSHBUTTON SWITCH OPENS. 

NO ACTION REQUIRED - RESULTS ARE THE SAME. 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


1/23/87 

GNC-1801A 

05-6-200400-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1801 

ABORT MODE SWITCH CIRCUIT 


LEAD ANALYST: J.M. HIOTT 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

c 


NASA 

[ 3 /1R ] 

[ P ] 

[ NA] 

[ p ] 

[ ] * 

IOA 

[ 3 /1R ] 

[ P ] 

[ P ] 

[ p ] 

[ ] 

COMPARE 

[ / ] 

[ ] 

[ N ] 

[ ] 

[ 1 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ / 3 

[ ] 

[ ] 

[ ] 

[ ] 






(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 


REMARKS: 

IOA FAILURE MODE: ABORT MODE PUSHBUTTON OR ABORT MODE ROTARY 
SWITCH CONTACT FAILED OPEN OR RESISTOR A1R1, A1R2, A1R3 SHORTED 
TO GROUND. 

FMEA FAILURE MODE: ALL CREDIBLE MODES - LOSS OF PWR, OPENS, 
SHORTS, CLOSES, INADVERTENT OPERATION. 

NO ACTION REQUIRED - RESULTS ARE THE SAME. 


REPORT DATE 02/03/88 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 
ASSESSMENT ID: GNC-1802 

NASA FMEA #: 05-6-2659-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1802 

ABORT MODE SWITCH CIRCUIT 


LEAD ANALYST: J.M. HIOTT 

ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

C 


NASA 

[ 2 /1R ] 

t P ] 

[ F ] 

[ F ] 

[ x ] 

IOA 

[ 2 /1R ] 

[ P ] 

[ P ] 

[ P ] 

C x ] 

IPARE 

[ / ] 

[ ] 

[ N ] 

[ N ] 

[ ] 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [][][] [ ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: ABORT MODE PUSHBUTTON SWITCH OR ABORT MODE 
ROTARY SWITCH CONTACT FAILED CLOSED. 

FMEA FAILURE MODE: INADVERTENT OPERATION - INADVERTENTLY 
CONDUCTS, INTERNALLY FAILED CLOSED (MULTIPOLES). 

NO ACTION REQUIRED - RESULTS ARE THE SAME. 


REPORT DATE 02/03/88 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


1/23/87 

GNC-1802A 

05-6-200400-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1802 

ABORT MODE SWITCH CIRCUIT 


LEAD ANALYST: J.M. HIOTT 

ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 2 /1R ] 

( P ] 

[ NA] 

[ F 1 

[ 

IOA 

[ 2 /1R ] 

[ P ] 

[ P ] 

[ P 1 

[ x 

COMPARE 

[ / ] 

( ] 

[ N ] 

[ N ] 

[ N 


RECOMMENDATIONS: (If different from NASA) 


[ 2 /1R ] [ NA] [ NA] [ NA) [ X ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: ABORT MODE PUSHBUTTON SWITCH OR ABORT MODE 
ROTARY SWITCH CONTACT FAILED CLOSED. 

FMEA FAILURE MODE: ALL CREDIBLE MODES - LOSS OF PWR, OPENS, 
CLOSES, INADVERTENT OPERATION. 

ACTION REQUIRED - UPDATE FMEA CRITICALITY TO 2/1R - ADD TO CIL. 


REPORT DATE 02/03/88 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 
ASSESSMENT ID: GNC-1803 

NASA FMEA #: 05-6-2659-2 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1803 

ABORT MODE SWITCH CIRCUIT 


LEAD ANALYST: J.M. HIOTT 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [ 3 /1R ] 

[ NA] 

[ NA] 

[ NA] 

C 

IOA [ 2 /1R ] 

[ P ] 

C P 3 

[ p ] 

[ x 

COMPARE [ N / ] 

[ N ] 

[ N ] 

[ N ] 

[ N 


RECOMMENDATIONS: (If different from NASA) 

[ 2 /1R ] [ P ] [ P ] [ P ] 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: ABORT MODE PUSHBUTTON SWITCH FAILED OPEN OR 
ROTARY SWITCH FAILED OPEN IN THE POSITION REQUIRED FOR A SELECTED 
ABORT. 

FMEA FAILURE MODE: PUSHBUTTON SWITCH OPENS - FAILS TO CLOSE, 

FAILS TO CONDUCT (MULTI-CONTACTS) . 

ACTION REQUIRED - UPDATE FMEA CRITICALITY - ADD TO CIL. 


[ X ] 

(ADD/ DELETE) 


REPORT DATE 02/03/88 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


1/23/87 

GNC-1803A 

05-6-200400-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1803 

ABORT MODE SWITCH CIRCUIT 


LEAD ANALYST: J.M. HIOTT 


ASSESSMENT : 

CRITICALITY 

FLIGHT 

HDW/FUNC 

NASA [ 3 /1R ] 
IOA [ 2 /1R ] 

COMPARE [ N / ] 

RECOMMENDATIONS : 

[ 2 /1R ] 


REDUNDANCY SCREENS 

B C 

[ NA] [ P ] 

[ P ] [ P 3 

[ N ] [ ] 

NASA) 

t P ] 


A 

[ P ] 

[ P 3 

[ ] 

(If different from 
[ P ] [ P 1 


CIL 

ITEM 


[ ] * 
[ X ] 

[ N ] 


[ X ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) ADEQUATE j. -j 

INADEQUATE [ ] 

IOA^FAILURE MODE: ABORT MODE PUSHBUTTON SWITCH FAILED OPEN OR 
ROTARY SWITCH FAILED OPEN IN THE POSITION REQUIRED FOR ABORT. 
FAILURE MODE: ALL CREDIBLE MODES - LOSS OF PWR, OPENS, 

CLOSES, INADVERTENT OPERATION. ann to ptt 

ACTION REQUIRED - UPDATE FMEA CRITICALITY TO 2/1R - ADD TO CIL. 


REPORT DATE 02/03/88 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 
ASSESSMENT ID: GNC-1804 

NASA FMEA #: 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


05-6-2659-1 

GNC 

1804 

ABORT MODE SWITCH CIRCUIT 
J.M. HIOTT 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 



CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY 
A B 

SCREENS 

C 

CIL 

ITEM 

NASA 

IOA 

C 2 /1R 
[ 1 /I 

] 

] 

[ 

[ 

P ] 
P ] 

[ F 

[ P 

] 

] 

[ 

[ 

F ] 
F ] 

[ x 
[ x 

] * 
] 

COMPARE 

C N /N 

] 

[ 

] 

[ N 

] 

[ 

] 

[ 

] 

RECOMMENDATIONS : 

(If 

different 

from 

NASA) 





[ 1 /I 

] 

[ 

NA] 

[ NA] 

[ 

NA] 

[ x 

] 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

REMARKS : INADEQUATE [ ] 

IOA FAILURE MODE: ABORT MODE PUSHBUTTON FAILED cr^Pn no Drvpaov 
SWITOi FAILED CLOSED IN A POSITION 

FMEA FAILURE MODE: PUSHBUTTON INADVERTENT OPERATION - 

S?^ MTLY C0NDDCTS - internally f£S 2S (5!dltipoles) 

ACTION REQUIRED - UPDATE FMEA CRITICALITY TO 1 / 1 . 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 1/23/87 
ASSESSMENT ID: GNC-1804A 

NASA FMEA #: 05-6-200400-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1804 

ABORT MODE SWITCH CIRCUIT 


LEAD ANALYST: J.M. HIOTT 

ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

c 


NASA 

[ 3 /1R ] 

[ P ] 

[ NA] 

[ p ] 

[ ] * 

IOA 

[1/1 ] 

[ P ] 

[ P ] 

[ F ] 

[ x ] 

COMPARE 

[ N /N ] 

[ ] 

[ N ] 

[ N ] 

[ N ] 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ / ] 

[ ] 

[ ] 

[ ] 

[ ] 






(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ) 

REMARKS: 

IOA FAILURE MODE: ABORT MODE PUSHBUTTON FAILED CLOSED OR ROTARY 
SWITCH FAILED CLOSED IN A POSITION OTHER THAN THE REQUIRED ABORT 


MODE. 

FMEA FAILURE MODE: ALL CREDIBLE MODES, LOSS OF PWR, OPENS, 
SHORTS, CLOSES, INADVERTENT OPERATION. 

ACTION REQUIRED - NONE ACTION COVERED IN GNC-1802A, GNC1803A. 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/20/87 
ASSESSMENT ID: GNC-1901 

NASA FMEA #: NONE 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1901 

ATT REF PB 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


LEAD ANALYST: TRAHAN, W. H. 

ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

C 


NASA 

[ / ] 

[ ] 

[ 3 

[ 3 

[ 3 

IOA 

[ 3 /1R ] 

[ P 3 

[ P 3 

[ P ) 

[ 3 

COMPARE 

[ N /N ] 

( N ] 

( N ] 

C N ] 

[ 3 

RECOMMENDATIONS : 

(If different 

from NASA) 



C 3 /1R ] 

[ P 3 

[ P 3 

[ P 3 

[ 3 


(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: CIRCUIT FAIL OPEN. 

IOA DOES RECOMMEND A FMEA FOR THIS FAILURE MODE SINCE THE 
CRITICALITY IS 3/1R AND PASSES ALL SCREENS. THE OTHER PUSHBUTTON 
IS AVAILABLE. 


REPORT DATE 02/03/88 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/20/87 
ASSESSMENT ID: GNC-1902 

NASA FMEA #: NONE 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1902 

ATT REF PB 


LEAD ANALYST: TRAHAN, W. H. 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

FLIGHT 




HDW/FUNC 

A 

B 

C 

NASA [ / ] 

[ ] 

[ 3 

[ ] 

IOA [ 3 /1R ] 

[ P ] 

[ P ] 

[ P ] 

COMPARE [ N /N ] 

[ N ] 

[ N ] 

[ N ] 


CIL 

ITEM 


[ ] * 

[ ] 

[ ] 


RECOMMENDATIONS : 

[ 3 /1R ] 


(If different from NASA) 

( P ] [ P 1 C P ] 


[ ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS Z 

IOA FAILURE MODE: CIRCUIT FAIL CLOSED. 

IOA DOES RECOMMEND A FMEA FOR THIS FAILURE MODE SINCE THE 
CRITICALITY IS 3/1R AND PASSES ALL REDUNDANCY SCREENS. 


REPORT DATE 02/03/88 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 

ASSESSMENT ID: GNC-1950X 

NASA FMEA #: 05-60-02, PREL REF NO. 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1950 

MEASUREMENT ISOLATION RESISTORS 


LEAD ANALYST: LES DRAPELA 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ ] * 
[ 3 

IOA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

COMPARE 

[ / ] 
rrs n m t 

[ ] 

[ ] 

[ ] 

[ 3 


RECOMMENDATIONS: (If different from NASA) 


1/1 [][][] [ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: 


REMARKS: 


(If applicable) 

ADEQUATE [ 
INADEQUATE [ 


IOA FAILURE MODE: OPENS, OUT OF TOLERANCE, SHORTS. 

FMEA FAILURE MODE: ACCELEROMETER ASSEMBLY MEASUREMENT 

RESISTORS-OPENS , OUT OF TOLERANCE, SHORTED TO GROUND 
NO DIFFERENCE. 


] 

] 


ISOLATION 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/20/87 

ASSESSMENT ID: GNC-1951X 

NASA FMEA #: 05-60-(01), PREL REF NO. 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1951 

MEASUREMENT ISOLATION RESISTORS 


LEAD ANALYST: LES DRAPELA 


ASSESSMENT: 

CRITICALITY 

FLIGHT 

HDW/FUNC 

NASA [3/3 ] 

IOA [3/3 ] 

COMPARE [ / ] 

RECOMMENDATIONS : (If 

[ / 1 


REDUNDANCY SCREENS 

ABC 

[ NA] [ NA] [ NA] 

[ NA] [ NA] [ NA] 

[ ] t 1 [ ] 

different from NASA) 

[ ] [ ] [ ] 


CIL 

ITEM 


[ ] * 

[ ] 

[ ] 


[ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS I 

IOA FAILURE MODE: RGA (12 RESISTORS) OPENS, OUT OF TOLERANCE, 

SHORTS 

FMEA FAILURE MODE: RGA (12 RESISTORS) OPENS, OUT OF TOLERANCE, 

SHORTED. 

NO DIFFERENCES. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/20/87 

ASSESSMENT ID: GNC-1952X 

NASA FMEA #: 05-60-(18) , PREL REF NO. 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1952 

MEASUREMENT ISOLATION RESISTORS 


LEAD ANALYST: LES DRAPELA 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ 

IOA [3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ 

COMPARE [ / ] 

[ ] 

[ 1 

[ ] 

[ 


RECOMMENDATIONS : 


(If different from NASA) 


( / 


[ ] 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: 


REMARKS: 


(If applicable) 

ADEQUATE [ 
INADEQUATE [ 


] 

] 


IOA FAILURE MODE: OPENS, OUT-OF-TOLERANCE, SHORTS. 

FMEA FAILURE MODE: ASA MEASUREMENT ISOLATION RESISTORS FAIL OPEN 
OUT-OF-TOLERANCE, SHORTED. ' 

NO DIFFERENCES: THE INSTRUMENTATION DATA IS USED TO MONITOR 
CIRCUIT OPERATION, AND NOT REQUIRED FOR VEHICLE CONTROL OR 
OPERATION. 

DURING THE ORIGINAL ANALYSIS, IOA DID NOT DOCUMENT THE FAILURE OF 
MEASUREMENT ISOLATION RESISTORS IN MONITORING CIRCUITS. A NEW 
ANALYSIS WORKSHEET (MDAC ID-1950) WAS PROVIDED. IOA DOES CONCUR 
WITH THE NEW FMEA. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/20/87 NASA DATA: 

ASSESSMENT ID: GNC-1953X BASELINE [ ] 

NASA FMEA #: 05-60-(09), PREL REF NO. NEW [ X ] 

SUBSYSTEM: GNC 

MDAC ID: 1953 

ITEM: MEASUREMENT ISOLATION RESISTORS 

LEAD ANALYST: LES DRAPE LA 

ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 

NASA [ 3 /3 ] [ NA] [ NA] [ NA] 

IOA [ 3 /3 ] [ NA] [ NA] [ NA] 

COMPARE [ / ] [][][] 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [][][] [ ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: OPENS, OUT-OF-TOLERANCE, SHORTS. 

FMEA FAILURE MODE: ATVC MEASUREMENT ISOLATION RESISTORS FAIL 
OPEN, OUT-OF-TOLERANCE, SHORTED. 

NO DIFFERENCES: THE INSTRUMENTATION DATA IS USED TO MONITOR 
CIRCUIT OPERATION, AND NOT REQUIRED FOR VEHICLE CONTROL OR 
OPERATION. 

DURING THE ORIGINAL ANALYSIS, IOA DID NOT DOCUMENT THE FAILURE OF 
MEASUREMENT ISOLATION RESISTORS IN MONITORING CIRCUITS. A NEW 
ANALYSIS WORKSHEET (MDAC ID-1950) WAS PROVIDED. IOA DOES CONCUR 
WITH THE NEW FMEA. 


CIL 

ITEM 


[ ] * 
[ ] 

[ ] 


REPORT DATE 02/03/88 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 3/20/87 
ASSESSMENT ID: GNC-1954X 

NASA FMEA #: 05-60-IMU(05) 


NASA DATA: 
BASELINE [ 
NEW [ 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


GNC 

1954 

MEASUREMENT ISOLATION RESISTORS 


] 

] 


LEAD ANALYST: LES DRAPE LA 

ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 


CIL 

ITEM 


NASA [ 3 /3 ] [ NA] [ NA] [ NA] 

IOA [ 3 /3 ] [ NA] [ NA] [ NA] 


[ ] * 

[ ] 


COMPARE [ / 


] 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [][][] [ ] 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

IOA FAILURE MODE: IMU (15 RESISTORS) OPENS, OUT OF TOLERANCE. 
FMEA FAILURE MODE: IMU (15 RESISTORS) OPENS, OUT OF TOLERANCE. 
NO ACTION REQUIRED - RESULTS ARE THE SAME. 


REPORT DATE 02/03/88 
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CRITICAL ITEMS 


D-l 


APPENDIX D 


CRITICAL ITEMS 


NASA FMEA 

IOA 

ITEM 

FAILURE MODE 


ID 

NAME 


05-1-FC3042-1 

101 

RHC 

PHY JAMMING/ BINDING 

05-1-FC3 142-1 

202 

THC 

IMMOBLE (JAM/ BIND) 

05-1-FC3442-3 

304 

RPTA 

LOSS OF ONE RPTA 

05-1-FC3242-1 

401 

SBTC 

PHY JAMMING/ BINDING 

05-1-FC3242-4 

406 

SBTC 

SW CONTACT FAIL CLOSE 

05-1-GN21-2 

501 

IMU 

ERRONEOUS OUTPUT 

05-60-200200-2 

501 

IMU 

ERRONEOUS OUTPUT 

05-1-GN21-1 


IMU 

NO OUTPUT 

05-60-200201-1 

510 

IMU DIODE 

FAILED OPEN 

05-1-FC1042-2 

902 

RGA (ORB) 

ERRONEOUS OUTPUT 

05-60-200301-1,-2 

904 

RGA (ORB) DIODE 

FAILED OPEN 

05-1 - SRB -2 

951 

RGA (SRB) 

ERRONEOUS OUTPUT 

05-60-GN0804-1 , -2 

960 

RGA (SRB) DIODE 

FAILED OPEN 

05-60-FC1042-1 

906 

RGA (ORB) RPC 

FAILED OPEN 

05— 1-FC2042— 2 

1002 

AA 

ERRONEOUS OUTPUT 

05-60-200501-1,-2 

1014 

AA DIODE 

FAILED OPEN 

05-1-FC6042-1 


ASA 

NULL OUTPUT 

05-60-200700-1 

■ 

ASA PWR CKT 

FAILED OPEN 

05-60-200701-1,-2 

| 

II If II 

ti ii 

05-60-200708-1 

1130 

II It ft 

ii ii 

05-60-200709-1 

1130 

If II II 

ii it 

05-1-FC6242-1 

1201 

RJDF 

NO OUTPUT TO JET 

05-1-FC6342-2 

1205 

RJDA 

INADVERT JET FIRING 

05-1-FC6242-2 

1206 

RJDF 

INADVERT JET FIRING 

05-1-FC6542-1 

1303 

ATVC 

NULL OUTPUT 

05-60-200600-1 

1310 

ATVC PWR CKT 

FAILED OPEN 

05-60-200601-1,-2 

1310 

it ii ii 

it ti 

05-60-200602-1 

1310 

it ti ii 

ii ii 

05-60-200606-1 

1310 

ii ii ii 

ii ii 

05-1-FC7258-2 

1576 

ORB DAP MAN PB 

FAILED CLOSED 

05-1-FC7259-2 

1580 

ORB DAP NOR/VER PB 

FAILED CLOSED 
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APPENDIX E 
DETAILED ANALYSIS 

This appendix contains the IOA analysis worksheets supplementing 
previous results reported in STSEOS Working Paper 1. 0-WP-VA86001- 
16, Analysis of the Guidance, Navigation, and Control Subsystem 
FMEA/CIL (16 December 1986) . Prior results were obtained 
independently and documented before starting the FMEA/CIL 
assessment activity. Supplemental analysis was performed to 
address failure modes not previously considered by the IOA. Each 
sheet identifies the hardware item being analyzed, parent 
assembly and function performed. For each failure mode possible 
causes are identified, and hardware and functional criticality 
for each mission phase are determined as described in NSTS 22206, 
Instructions for Preparation of FMEA and CIL . 10 Octo ber 1986. 
Failure mode effects are described at the bottom of each sheet 
and worst case criticality is identified at the top. 


LEGEND FOR IOA ANALYSIS WORKSHEETS 


Hardware Criticalities: 

1 = Loss of life or vehicle 

2 = Loss of mission or next failure of any redundant item 

(like or unlike) could cause loss of life/vehicle 

3 = All others 

Functional Criticalities: 

1R = Redundant hardware items (like or unlike) all of which, 
if failed, could cause loss of life or vehicle. 

2R = Redundant hardware items (like or unlike) all of which, 
if failed, could cause loss of mission. 


Redundancy Screen A: 

1 = Is Checked Out PreFlight 

2 = Is Capable of Check Out PreFlight 

3 = Not Capable of Check Out PreFlight 

NA = Not Applicable 


Redundancy Screens B and C: 
P = Passed Screen 
F = Failed Screen 
NA = Not Applicable 


E-l 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 1/09/87 

SUBSYSTEM: GNC 

MDAC ID: 406 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 1/1 


ITEM: SBTC 

FAILURE MODE: PHYSICAL JAMMING OF TAKEOVER SWITCH 


LEAD ANALYST: ROBERT O'DONNELL 


SUBSYS LEAD: LESTER DRAPE LA 


BREAKDOWN HIERARCHY: 

1) GNC 

2) SBTC 

3) 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF : 

2/1R 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/1R 

ATO: 

2/1R 

LANDING/SAFING 

: 3/1R 


REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION: PNL L2 

(31V73A2A2 ) , 

C3 (35V73A3A3) 



PART NUMBER: MC621-0043-3240 

CAUSES: VIBRATION, MECHANICAL SHOCK, CONTAMINATION, MISHANDLING, 

PIECE PART STRUCTURAL FAILURE. 


EFFECTS/RATIONALE : 

FOR PLT MAN THRUST TAKEOVER, 1ST FAILURE IS THE NEED FOR DOWNMODE 
FROM AUTO TO MANUAL. DURING ASCENT, THE PLTs TAKEOVER SWITCH 
JAMMED ON OR OFF WILL RESULT IN EITHER MANUAL OR AUTO THRUST 
CAPABILITY. TAL ABORT REQUIRES MANUAL THRUST CAPABILITY. 

BOTH CDRs AND PLTs SBTC CONTROLS SPD BRK CMDS DURING ENTRY. IF 
ONE TAKEOVER SWITCH JAMS OPEN, OTHER POSITION PERFORMS FUNCTION. 
IF TAKEOVER SWITCH JAMS ON, ONLY MANUAL CONTROL OF SPD BRK 
EXISTS. SPD BRK IS NORMALLY FLOWN IN AUTO DURING ENTRY. 


REFERENCES : 


REPORT DATE 02/02/88 


E-2 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

1/09/87 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

GNC 

FLIGHT: 

3/1R 

MDAC ID: 

603 

ABORT: 

3/3 

ITEM: 

STAR TRACKER 



FAILURE MODE 

: LOSS OF INPUT 



LEAD ANALYST 

: LES DRAPELA 

SUBSYS LEAD: LES DRAPELA 



BREAKDOWN HIERARCHY: 

1) GNC 

2) STAR TRACKER 

3) 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT : 

3/1R 

AOA: 

3/3 

DEORBIT : 
LANDING/SAFING 

3/3 
: 3/3 

ATO: 

3/3 

REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 


LOCATION: 10V71A7(-Y), A6(-Z) 

PART NUMBER: MC43 1-0128-0012 

CAUSES: INPUT CIRCUITRY FAILED DUE TO MECHANICAL SHOCK, 

VIBRATION , TEMPERATURE 

EFFECTS /RATIONALE : 

CREW CANNOT ISSUE COMMANDS - THE OTHER ST AND COAS SERVE AS 
BACKUP. 


REFERENCES : 


REPORT DATE 02/02/88 


E-3 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


1/09/87 

GNC 

604 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/3 


ITEM: STAR TRACKER 

FAILURE MODE: MECHANICAL SHUTTER FAILS OPEN 


LEAD ANALYST: LES DRAPE LA SUBSYS LEAD: LES DRAPE LA 


BREAKDOWN HIERARCHY: 

1) GNC 

2) STAR TRACKER 

3) 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT : 

3/1R 

AO A: 

3/3 

DEORBIT : 
LANDING/SAFING : 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 


LOCATION: 10V71A7(-Y), A6(-Z) 

PART NUMBER: MC431-0128-0012 


CAUSES: VIBRATION, JAMMING, MECHANICAL SHOCK 

EFFECTS/RATIONALE : 

POSSIBLE LOSS OF THE ST DUE TO SUN DAMAGE. THE OTHER ST AND COAS 
SERVE AS BACKUP. 


REFERENCES : 


REPORT DATE 02/02/88 


E-4 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 1/07/87 

SUBSYSTEM: GNC 

MDAC ID: 703 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/3 


ITEM: COAS 

FAILURE MODE: INCORRECT MOUNTING OR UNABLE TO MOUNT 

LEAD ANALYST: LES DRAPELA SUBSYS LEAD: LES DRAPE LA 


BREAKDOWN HIERARCHY: 

1) GNC 

2 ) COAS 

3) 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT : 

3/1R 

AO A: 

3/3 

DEORBIT : 

3/3 

ATO: 

3/3 

LANDING/SAFING 

: 3/3 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 


LOCATION: PANEL 01 (CMD'S STATION) , OVERHEAD WINDOW W7 (AFT 

STATION) 

PART NUMBER: V620-660-810 


CAUSES : VIBRATION , SHOCK 

EFFECTS/RATIONALE : 

LOSS OF COAS - 2 ST'S AVAILABLE 


REFERENCES : 


REPORT DATE 02/02/88 


E-5 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 3/25/87 HIGHEST CRITICALITY HDW/FUNC 

SUBSYSTEM: GNC FLIGHT: 3/1R 

MDAC ID: 1014 ABORT: 3/1R 

ITEM: DIODE -AA'S 3 & 4 POWER CIRCUITS 

FAILURE MODE: FAILS OPEN 

LEAD ANALYST: LES DRAPE LA SUBSYS LEAD: LES DRAPELA 


BREAKDOWN HIERARCHY: 

1) GNC 

2) ACCELEROMETER ASSEMBLY 

3) AA'S 3 & 4 POWER CIRCUIT 

4) DIODE 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO A: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/1R 




REDUNDANCY SCREENS: A[2] B[F] C[P] 


LOCATION: 83V76A24 

PART NUMBER: JANTXIN1204RA 


CAUSES: SHORT TO GROUND, PIECE PART STRUCTURAL FAILURE, 

VIBRATION 

EFFECTS /RATIONALE : 

AA'S 3 & 4 HAVE TWO POWER CIRCUITS. THE LOSS OF ONE DIODE 
REMOVES ONE POWER CIRCUIT ONLY, THE OTHER CIRCUIT CONTINUES TO 
SUPPLY POWER TO THE RGA. THE LOSS OF ONE DIODE CANNOT BE 
DETECTED, THEREFORE SCREEN B IS FAILED. 


REFERENCES : 


REPORT DATE 02/02/88 


E-6 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 3/03/87 

SUBSYSTEM: GNC 

MDAC ID: 1950 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: MEASUREMENT ISOLATION RESISTORS 

FAILURE MODE: OPENS, OUT OF TOLERANCE, SHORTS 

LEAD ANALYST: LES DRAPE LA SUBSYS LEAD: LES DRAPELA 


BREAKDOWN HIERARCHY: 

1) GNC 

2 ) 

3) 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT : 

3/3 

ATO: 

3/3 

LANDING/SAFING 

: 3/3 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: THROUGHOUT GNC SUBSYSTEM 

PART NUMBER: 


CAUSES: SHOCK, VIBRATION, TEMPERATURE 

EFFECTS/RATIONALE : 

NONE. ONLY USED TO MONITOR CIRCUITS, NOT REQUIRED FOR VEHICLE 
OPERATION. 


REFERENCES : 


REPORT DATE 02/02/88 


E-7 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

3/03/87 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

GNC 

FLIGHT : 

3/3 

MDAC ID: 

1951 

ABORT: 

3/3 

ITEM: 

MEASUREMENT 

ISOLATION RESISTORS 


FAILURE MODE 

: OPENS , OUT 

OF TOLERANCE, SHORTS 


LEAD ANALYST 

: LES DRAPELA 

SUBSYS LEAD: LES DRAPELA 



BREAKDOWN HIERARCHY: 

1) GNC 

2 ) 

3) 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT : 

3/3 

AOA: 

3/3 

DEORBIT : 
LANDING/ SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: THROUGHOUT GNC SUBSYSTEM 

PART NUMBER: 


CAUSES: SHOCK, VIBRATION, TEMPERATURE 

EFFECTS/RATIONALE : 

NONE. ONLY USED TO MONITOR CIRCUITS, NOT REQUIRED FOR VEHICLE 
OPERATION. 


REFERENCES : 


REPORT DATE 02/02/88 
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INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

3/03/87 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

GNC 

FLIGHT: 

3/3 

MDAC ID: 

1952 

ABORT: 

3/3 

ITEM: 

MEASUREMENT 

ISOLATION RESISTORS 


FAILURE MODE 

: OPENS , OUT 

OF TOLERANCE, SHORTS 


LEAD ANALYST 

: LES DRAPELA 

SUBSYS LEAD: LES DRAPELA 



BREAKDOWN HIERARCHY: 

1) GNC 

2 ) 

3) 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE HDW/FUNC ABORT 

PRELAUNCH: 3/3 RTLS : 

LIFTOFF: 3/3 TAL: 

ONORBIT: 3/3 AOA: 

DEORBIT: 3/3 ATO: 

LANDING/SAFING: 3/3 


REDUNDANCY SCREENS: A [NA ] B [NA ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA ] 


LOCATION: THROUGHOUT GNC SUBSYSTEM 

PART NUMBER: 


CAUSES: SHOCK, VIBRATION, TEMPERATURE 


EFFECTS/RATIONALE : 

NONE. ONLY USED TO MONITOR CIRCUITS, NOT REQUIRED FOR VEHICLE 
OPERATION. 


REFERENCES : 


REPORT DATE 02/02/88 
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INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


3/03/87 

GNC 

1953 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: MEASUREMENT ISOLATION RESISTORS 

FAILURE MODE: OPENS, OUT OF TOLERANCE, SHORTS 


LEAD ANALYST: LES DRAPELA 


SUBSYS LEAD: LES DRAPELA 


BREAKDOWN HIERARCHY: 

1) GNC 

2 ) 

3) 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF : 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 
LANDING/ SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: THROUGHOUT GNC SUBSYSTEM 

PART NUMBER: 

CAUSES: SHOCK, VIBRATION, TEMPERATURE 

EFFECTS/RATIONALE : 

NONE. ONLY USED TO MONITOR CIRCUITS, NOT REQUIRED FOR VEHICLE 
OPERATION. 


REFERENCES : 


REPORT DATE 02/02/88 
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INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 3/03/87 

SUBSYSTEM: GNC 

MDAC ID: 1954 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: MEASUREMENT ISOLATION RESISTORS 

FAILURE MODE: OPENS, OUT OF TOLERANCE, SHORTS 


LEAD ANALYST: LES DRAPE LA SUBSYS LEAD: LES DRAPE LA 


BREAKDOWN HIERARCHY: 

1) GNC 

2 ) 

3) 

4) 

5) 

6 ) 

7) 

8 ) 

9) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

PRE LAUNCH: 

3/3 

RTLS 

LIFTOFF : 

3/3 

TAL: 

ONORBIT : 

3/3 

AO A: 

DEORBIT : 

3/3 

ATO: 

LANDING/SAFING 

: 3/3 



HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY SCREENS: A [NA ] 


B [NA ] C [NA ] 


LOCATION: THROUGHOUT GNC SUBSYSTEM 

PART NUMBER: 


CAUSES: SHOCK, VIBRATION, TEMPERATURE 

EFFECTS/RATIONALE : 

NONE. ONLY USED TO MONITOR CIRCUITS, NOT REQUIRED FOR VEHICLE 
OPERATION. 


REFERENCES : 


REPORT DATE 02/02/88 


E-ll 




APPENDIX F 


NASA FMEA TO IOA WORKSHEET CROSS REFERENCE/RECOMMENDATIONS 


This section provides a cross reference between the NASA FMEA and 
corresponding IOA analysis worksheet (s) included in Appendix E. 
The Appendix F identifies: NASA FMEA Number, IOA Assessment 

Number, NASA criticality and redundancy screen data, and IOA 
recommendations . 


Appendix F Legend 
Code Definition 
None. 
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APPENDIX F 


NASA FMEA TO IGA WORKSHEET CROSS REFERENCE ! RECOMMENDATIONS 


; IDENTIFIERS 

! NASA 

» _ _ i 

! IOfi RECOMMENDATIONS t 

» 

: NASA 

IOA 

CRIT 

! SCREENS 

1 

GRIT 

SCREENS i OTHER ‘ ISSUE 

; FKEfi NUMBER 

ASSESSMENT NUMBER 

KH/F 

[ABC 

HW/F 

ABC! (SEE LEGEND CODE) 1 

1 






i 

GNC-960 

/ 


/ 

I ; 

! 

BNC-961 

/ 


/ 

j i 

! 05-01-110), PREL REF 

GRC-951 

2/1R 

P F P 

/ 

i i 

V i 

I 05-1-10?), PREL REF 

BNC-950 

3/1R 

P P P 

i 

1 < 

1 J -1 C _ * _ j T n ,> t 

GNC-1580 

2 / ? 

HA NA HA 

/ 


; 05-i-;TSD03J 

SIC - i j5 1 A 

3/2R 

P P P 



: 05-i - ( TBD04 ) 

3NC-1586A 

7 1 7 

j i j 

NA NA NA 

'T* 

4. f i. 

NA NA NA ! 1 

! 05-l-(TBD05) 

SKC-1586B 

n /? 

NA NA NA 

1 

1 

j , 

t 

1 05-1-1T3DG6) 

BNC-1561B 

7 i 7 

J. J 

NA NA NA 

3/2R 

p p p ; ; 

! 05- 1 - ( TBDOi ) 

GNC-1576 

2/2 

NA NA NA 

f 

J j 

* * 

: 05-i -FC1042-! 

5NC-901 

3/1R 

P P P 

j 

i i 

1 05- i-FCl 042-2 

8NC-902 

2/1R 

P p p 

j 

i 

: 05-1-FC2042 -1 

8NC-1001 ! 

3/1R 

P P P 

/ 


1 05- X-FC2042-2 

GNC-1002 ! 

2/1R 

P F P 

i 

! 

! 05-1 -FC3042- 1 

GNC-101 : 

1/1 

NA NA NA 

i 

1 j 

! 05- 1 -FC3042-2 

SMC - 1 02 1 

3/1R 

p p ? 

/ 

t 


GNC-104 ! 

3/10 

P P p 


| j 

! 05-1-FC3042-3 

GNC-103 : 

3/ift 

P P P 


; ; 

> 

GNC-105 ! 

3/lft 

P P P 

/ 

1 1 j 

! 05-1-FC3142-1 

GNC-202 | 

2/iR 

P P P 

/ 

| ; 

! 05-1-FC3142-2 

GNC-201 ! 

3/iR 

P P P 

/ 

J j 

i 3 i 

! 05- 1-FC3 142-3 

GNC-203 ! 

3/iR 

P P P 

/ 

> i 

1 05-1 -FC3242-1 

SNC-401 ! 

2/iR 

P P P 

t 

i 

■ 1 l 

! 05- 1 -FC3242-2 

SMC -402 ! 

3/iR 

P P P 

! 

j t 1 

1 05-1 -FC3242-3 ! 

SNC-403 ! 

3/IR 

P P P 

! 

> 1 t 

f 1 < 

I 05-1-FC3242-4 

SNC-406X ! 

2/iR 

P P P 

1 

1 j j 

i 05-1-FC3442-1 ! 

6NC-301 

3/lR 

P P P 


1 1 i 

1 1 ; 

! 05-1-FC3442-2 

BNC-302 ! 

3/IR 

P P P 

} 

1 ; 

\ 05-1-FC3442-3 

GNC-304 ! 

1/1 

NA NA NA 

! 

1 ) 1 

‘ 1 1 

: 05-1-FC6042-1 

GNC-1103 ! 

2/iR 

P F P 

i 

> 1 < 

! 05-1-FM042-2 

GNC-1104 ! 

3/iR 

P P P 

j 

1 1 ! 

1 i t 

; 05-1-FC6242-1 

! SMC- 1201 ! 

2/iR 

P P P 

i 

» j • 

! 05-1-FCA242-2 

GNC-1206 ! 

i /1 

P P P 

i 

i ; ! 

1 05-i-FC6342-i 

! SNC-1203 ! 

3/iR 

P P P 

t 

> i i 

i j , 

1 05-1-FC6342-2 

GNC-1205 1 

1/1 

P P P 

i 

J 

i i i 

! 05-1-FC6542-1 

: GNC-1303 1 

2/iR 

P F P 

! 

i i 

i i 1 

I 05-1-FC6542-2 

SNC-1304 : 

3/IR 

P P P 

/ 

> i i 

i 05- ! -FC724 1 -000 i 

GHC-120 ! 

3/3 

NA NA NA 

} 

■ ! • 

! 

SNC-121 ! 

3/3 

NA NA NA 

j 

; i 

i 05-1-FC7242-0001 

BNC-140 : 

3/3 

NA NA NA 

! 

i ; ; 

l 

GNC-141 1 

3/3 

NA NA NA 

/ 

t 1 

' > t 

1 05- 1-FC724 4-0001 

GMC-liiO ! 

3/iR 

F P P 

3/ 1R 

P P P ! : ; 

i 

GNC-llil S 

3/iR 

F P P 

3/iR 

P P P ! i ; 

1 05-1-FC7244-0002 

BNC-illlA 1 

3/iR 

F P P 

3/IR 

P P P i ; j 

! 05- 1 -FC7245-OOOI 

GNC-160 1 

j/ j 

NA NA NA 

1/1 

NA NA NA 1 

» : 

i i 


F-2 


IDENTIFIERS ! ! 

NASA ! 

i 

IGA RECDMENDATICNS % 

NASA : 

..... , i 

ida : 

CRII I 

i 

crpcc^q 

\ 

\ CRIT 

SCREENS ! OTHER ! ISSUE 

FMEfi NUMBER ! 

ASSESSMENT NUMBER ! 

H«/F 

A E C 

HH/F 

ABC! (SEE LEGEND CODE; ! 

II 

II 

M 

II 

II 

II 

II 

II 

II 

II 

II 

II 

II 

M 

II 

II 

It 

II 

II 

II 

II 

M 





========== ; =====================; ======= 

05- 1 -FC7245-0001 

GNC-isi : 

3/3 

NA NA NA 

i 3/1R 

P P P ! ! 

05-1-FC7245-0002 

SNC-160D ! 

3/3 

NA Nfi NA 

! 3/LR 

P P P ! [ 

05-1 -FC7246-000 I 

BNC-1S0A 1 

3/3 

NA NA NA 

! 3/lR 

P P P ! : 


GNC-iMA 1 

3/3 

NA NA NA 

! 3/lR 

P P P ! i 

05- 1 -FC7246-0002 

BHC-ltOE ! 

- 

Nfi Nfi Nfi 

! 3/lR 

p p p : i 

05-1-FC7248-0001 

GNC-160B ! 

y 17 
0/ J 

NA NA NA 

! 1/1 

p p p : : 


GNC-161B !• 

3/3 

Nfi NA Nfi 

J 3/lR 

P P P ! 1 

Q5-1-FC7248-00Q2 

GNC-160F S 

3/3 

NA NA NA 

! 3/lR 

p p p ! i 

05- 1-FC72 49-0001 

SNC-S60C ! 

7 / 7 

NA NA NA 

1 3/lR 

p p p : i 


SNC-161C 1 

7 ■ 7 

NA NA NA 

i 7 ; i r* 

i J l i ?. 

p p 0 

05-1 -F 07249-0002 

SNC-160G ; 

■j i 'j 

m NA NA 

i 3/lR 

p p P : 

05-1-FC7250-0001 

BNC-1601 : 

3 / 3 

NA NA NA 

I / 

t \ 


SNC-1602 

3/3 

NA NA NA 

• f 


05-1 -FC7251-0001 

GNC-410 i 

3/3 

NA NA NA 

! / 

i j 

i l 


8NC-411 : 

3/3 

Nfi Nfi Nfi 

! / 

i i 

05- i -FC725 i -0002 

SNC-410 A 1 

y /v 

0.' J 

NA NA NA 

* / 


05- 1 -FC7252-0001 

SNC-1400 i 

7/3 

NA Nfi NA 

1 7 i t n 

j j / i n. 

p p p : : 


SNC-1401 ! 

3/3 

Nm rin i 'in 

! 3/ IF; 

P p p ; ; 


GNC-1404 ! 

3/3 

Nh Nft NA 

: 3/ir 

p p p : 

05- 1 -FC7253-000 1 

GNC-1402 

■J t V 

NA NA NA 

! 3/lR 

F P P 1 i 


GHC-1403 i 

•J / j 

NA NA NA 

: 3/ir 

P P P ! 1 

A5-1-PC7253-OO02 

5NC-1403A I 

7 / 7 

NA Nfi NA 

! 3/IR 

P p n 

05-1-FC7254-! 

SNC-130 1 

3/3 

NA NA NA 

i i 



SNC-13I 1 

3/3 

NA NA NA 

j i 

{ 3 

05-1-FC7255-1 

GNC-130A •: 

7 /7 

II.'; II ft lift 

■ 4H iix 

1 / 



SNC-131A ! 

3/3 1 

NA Nfi NA 

! / i 


05-1-FC7256-1 

GNC-130B 

3/3 

NA NA NA 

{ ! 



GNC-131B i 

7 : y 

J / J 

NA NA NA 

; i 


05-1-FC7257-0001 

GNC-1501 : 

3/3 

NA NA NA 

i 3/2R 

P P P 1 


SMC-1502 J 

y >7 
J 

NA NA NA 

! 3/2R ! 

P P P ! ! 


SNC-1570 1 

3/3 

NA NA NA 

! 3/2R 

P p P i 

05- i -FC7253-0001 

GNC-1510 : 

3/3 

NA NA NA 

; 3/2R i 

p p p ! : 


6KC-1521 ! 

3/3 

NA NA NA 

! 3/2R 

p p p j 


GNC-1515 ! 

■ j / J 

NA NA NA 

f 7 f nr, 

f -J/ 

p p p : 


SNC- 151 6 ! 

3/3 

NA NA NA 

1 3/2R 

p P P i ! 


SNC-1575 ! 

3/3 

NA Nfi NA 

i 3/2R 

P p P ! ! 


ewc-1577 •; 

•j; J 

NA NA NA 

i 7 ,■ n r, 

» j/iin. 

P P P i ! 

05-1-FC7259-0001 

GNC-1520 

7 / 7 

NA NA NA 

i 7 i nn 

i -*•' *.n 

p p p : ; 


GNC-1521 1 

3/3 

NA NA NA 

! 3/2R 

P P P ; ; 

05-1-FC7260-0001 

GNC-1560 ! 

T > 7 

0/ J 

NA NA NA 

! 3/2R 

P P P 1 ! 


SNC- 1561 ! 

: 3/3 

NA NA NA 

! 3/2R 

P P P ! i 


GNC-15B6 \ 

1 3/3 

NA NA NA 

: 2/2 

NA NA NA ! ! 

05- I -FC726 1 -000 1 

GNC-1530 1 

1 7/7 

1 J / J 

NA NA NA 

! 3/2R 

P P P ! I 


GNC-1535 : 

' 7 

NA NA NA 

! 3/2R 

? P P ! 1 


GNC-1536 

! 3/3 

NA NA NA 

I 3/2R 

p p ? ! : 


GNC-1540 1 

: 3/3 

NA NA NA 

; 3/2R 

p p p : \ 


BNC-1541 \ 

I 3/3 

NA NA NA 

i 3/2R 

P P P ! ! 


SNC-1545 ! 

) 7,-7 

1 J , j 

NA NA NA 

! 3/2R 

p p p : : 


SNC-1546 ! 

f 7 17 

1 0/J 

NA NA NA 

! 3/ 2ft 

P P P ! 1 


GNC-1550 i 

■! 7/7 

NA NA NA 

; 7/2R 

P P P ! 


F-3 



IDENTIFIERS 

1 NASA 


IGA RECOMMENDATIONS * 

1 NASA 

IDA 

! CRIT 

S SCREENS 

1 CRIT 

SCREENS ! OTHER 1 ISSUE 

I FMEfl NUMBER 

ASSESSMENT NUMBER 

J HH/F 

: A B C 

! HH/F 

ABC: 1SEE LEGEND CODE) 





j 


I 05— 1-FD7261-9001 

3KC-155! 

i 3/3 

NA NA NA 

i ? /nn 

i wi 

P P P 1 j 

J 

GNC-15SI 

: 3/3 

m m na 

! 3/2R 

p P p ; I 

{ 

BKC-15B2 

! 3/3 

NA NA NA 

* n in 

• i 

NA NA NA ! I 

J 

SNC-1585 

i y t y 

t J / J 

NA NA NA 

i n /h 

i £|* <£ 

NA NA NA ! • 

i 05-i-FC7261-00QiA 

GNC-1531 

! 3/3 

NA NA MA 

! 3/2R 

P P P ! ; 

! 05-1-FC7262-0001 

BNC-150 

{ 3/3 

NA NA NA 

: / 

i i 

i i 

i 

SNC-151 

! 3/3 

NA NA NA 

; / 

» f ; 

* 

! 95-1-SN21-! 

GNC-502 

! 3/iR 

P P F 

1 / 

> i 

! 05-1-SN21-2 

SNC-501 

! 2/ift 

P P F 

! / 

S f 

; 05-i -GN22- i 

GNC-601 

: 3/iR 

pOp ; 

! 


; 05-1-GN22-2 

GNC-603K 

\ 3/ 1R 

P F P 



1 05-1-GN22-3 

GNC-6Q4X 

; 3/ 1 r 

P P P 

» / 

4 /' 

J ■ 

! D5-1-GN22-4 

SNC-6Q1A 

! 3/iR 

P P P 

i ,< 

1 r 

i | 

I 05-1-SN2S-1 

GNC-802 

1 3/iR 

P P P 

1 / 

> ; 

1 05-1-SN29-2 

GNC-801 

1 3/iR 

P P P 

\ i 

i - 

a j 

! 05-6-200400-1 

SNC-1801A 

! 3/iR 

P NA P 

1 / 

< > 
t 

J 

BKC-1B02A 

1 2 / ! R 

P NA F 

j 2 / 1 R 

NA NA NA ! 


GNC-1803A 

: 3/iR 

P NA P 

1 2/ 1 P 

p p p » - 

! 

ENC-1804A 

; 3/[p 

P NA P 


• 

1 05-6-2659-1 

SNC-i 302 

; 2/ jr 

p p F 


* a i 

! 

GNC-1804 

I 2/ IF; 

P F F 

; i/l 

NA NA NA i 

: 95-6-2659-2 

GNC-130I 

} 3/t& 

NA NA NA 

i / 



GNC-1803 

; 3/iR 

NA NA NA 

i 2 / [ R 

p p p i 

! 05-50- (0!), PREL REF 

3NC-1951X 

3/3 

NA NA NA 

! / ; 

j 

i 05-60- (03). FREL REF 

BNC-I012 

3/iR 

P P P 

: / ; 

I : : 

! 05-60- (04), PREL REF 

SNC-1012A 

3/LR 

' P P P 

J ; f 1 

i } ! 

i 05-60- (05), PREL REF 

BNC-10123 

3/IR 

i P P P 

! / 1 

1 ! r 

! 05-60- (06), PREL REF 

BMC-llilB 

3/iR 

P P P 

! / 1 

1 I 

1 05-60- (071, PREL REF 

BNC-1310B 

3/3 

! NA NA NA 

i / 1 

1 ! t 

i j 

! 05-60- (03), PREL REF 

SNC-llilC 

3/3 

NA NA NA 

i / i 

! • i 

1 1 E 

! 05-60-109), PREL REF 

BMC-1953X 

3/3 

I NA NA NA 

! f J 

1 , | 

! 05 -60- (10) , PREL REF 

GNC-1310C 

2/1R 

P F P 

■ / 1 

j i ; 

! 05-60- (ID, PREL REF 

BHC-1310D 

3/iR 

P F P 

i 1 1 

i , , 

) 05-60- (12), PREL REF 

6NC-1310E 

3/ 1R 

p p p 

1 1 1 
1 i j 

> ■, r 

i , 

i 05-60- (13), PREL REF 

SMC- 1 112 

3/3 

NA NA NA 

: / i 

J J 

! 05-60- (14), PREL REF 

GNC-1130C 

2/1R 

P F P 

i / i 

f ; i 

i 1 i 

! 05-60- (15), PREL REF 

SNC-i 130D 

3/ IP 

P F P 

j / ( 


! 05-60- (16) , PREL REF 

BNC-1130E 

7 t V 

J i 

NA NA NA 

i / ! 

t [ , 

; 05-60-117), PREL REF 

GNC-U30F 

3/IR 

P P P 

1 / 1 

•; ; <- 

1 05-60- (13), PREL REF 

GNC-1952X 

3/3 

NA NA NA 

: / : 

1 s 1 

< E l 

! 05-60-02, PREL REF H 

GNC-1950X 

3/3 

NA Nfi NA 

i / j 

1 ' f 

t j , 

! 05-60-200100-1 

GNC-611 

3/iR 

P P P 

! / ! 

1 1 t 

i 

SNC-612 

3/IR 

P P P 

* / ; 

i i j 

! 05-60-200200-1 i 

3NC-5I1 

3/iR 

P P P 

f | I 

1 f 1 

! 05-60-200200-2 1 

3NC-5I2 

J j 

NA NA NA 

* / i 

i < t 

i i ^ 

i 05-60-200201-1 ! 

SNC-5 2 0 

3/iR 

P F P 

> i i 

1 * « 

1 05-60-200301-1 ; 

BNC-904 

; 3/iR 

P F P ' 

I / i 

; ; 

! 05-60-200501-1 ! 

GNC-1914X 

; 3/IR 

P F P 

{ / i 

1 • 

: 05-60-200601-1 ; 

SNC-1310 

' 3/IR ; 

P F P 

j / 


! 05-60-200602-1 ! 

GNC-1310A 

T If 
:‘i J l 

1 1 

NA NA NA 

i i 

i i 

i i , 

* F t 
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! IDENTIFIERS ! 

! NASA 


IOA RECOMMENDATIONS * i 

i 

NASA 

IOA 

j 

! CRIT ! 

SCREENS 

i 

I CRIT 

SCREENS ! OTHER ! ISSUE : 

! FMEA NUMBER 

ASSESSMENT NUMBER 

! HN/F ! 

A B C 

SI Htf/F 

i 

ABC! iSEE LEGEND CODE) 1 1 

i" 

i 05-60-200701- i 

GNC-1130 

S 3/1R ! 

P F P 

i — — — 

i * < 

• i 

i j 5 

! 05-60-200703-1 

SNC-1I3GA 

! 3/3 ! 

HA Nfi HA 

i 

i < 

j 3 1 

l 5 1 

! 05-60-2007 06- I 

BNC-1130B 

i 7 if i 

1 yji J 1 

NA NA NA 

II / 

1 i i 

! 05-60-200800-0001 

SNC-1590 

» Tty 1 

1 J /0 i 

NA NA NA 

II / 

1 ! 5 

; 

GNC-1 591 

i 7 i y t 

1 J i -j i 

NA NA NA 

> 1 ■ 
I 1 

1 ! ! 

1 1 * 

i 

SNC-1593 

! 3/3 ! 

NA NA NA 

Ii 3/IR 

P P P ! i ; 

! 05-60-FC 1042-0001 

5NC-905 

! 3/1R J 

F P P 

* 1 f 

i ; * 

i i 

i 05-60-FC ! 043-000 1 

GNC-903 

! 3/1R ! 

P P P 

• i / 

t j 

l ; : 

1 05-60-FC 1044-000 1 

SMC-904A 

! 3/1R ! 

P P P 

1 1 j 

i l 

I » ■ 

; 05-60-FC 10 45-0001 

SNC-1010 

! ■:> ! 1 K 1 

n n, p. 

i * / 

\ ’ I 


GNC-1011 

i 7 i i r. i 

P P P 

: 1 j 


! 05-60-5*10801-1 

GNC-810 

; 3/ir ; 

P P P 

i 1 J 

I I 1 

t 

i 

GNC-811 

! 3/IR ! 

P P P 

1 ! / 

\ ! i 

I i i 

! 05-60-BN08G2-1 

GNC-312 

S 3/3 ! 

NA NA NA 

i i / 

1 1 7 

1 * i 

i 05 -60- I MU (03) 

SNC-510A 

! 3/IR I 

P P P 

II / 

1 < i 

i . i 

I Q5-6Q-IHU(05) 

GNC-1 954X 

! 3/3 ! 

NA NA NA 

1 1 «' 
1 i f 

! 1 S 

! 05-60 - m (04) 

SNC-510B 

I 3/IR 1 

P P P 

1 1 r' 

1 ! 

I 05-62-2103-1 

SNC-11 1 

! 3/IR ! 

P F P 

1 ! / 

: = j 

; 05-6Q-2203-CTBD) PRE 

GNC-111B 

! 2/2 ! 

P P P 

l * / 

i f / 


1 05 -6 Q -2203-1 

SNC-11 1A 

! 2/1R ! 

p p p 

r i j 

1 ) { 

1 05-60-2203-2 

GNC-110 

! 3/3 1 

NA NA NA 

■ ■ 

i i i 

1 ! t 

; 05 -6Y- 202000-1 

SNC-711 

; 3/IR i 

p p p 

1 t t 

i 1 / 

; i 


SNC-712 

i 3/IR i 

P P P 

1 < 1 
1 j r 

j 1 ; 

1 07-1-725101-1 

5NC-703X 

! 3/IR : 

P P P 

' » 1 
1 ! i 

1 1 t 

l t * 

I 07-1-725101-3 

SMC -701 

! 3/IR ! 

P P p 

1 1 


: NONE 

GNC-1013 

! 1 / i 


I ! 7 S 7 

II 0 / V 

MA NA NA I II 

i 

SNC-1101 

i > / t 

it t i 


II 3/iR 

P P F 1 I i 

i 

SNC-1102 

II / ! 


II 3/IR 

P P P 1 ! i 

! 

BMC- 1105 

II / 1 


li 3/ 1ft 

P P P I ; i 

J 

SMC- 1106 

ii / i 

it * t 


1 ! 3/IR 

P P P 1 I 1 

1 

GNC-1 107 

ii i i 

ii > ■ 


II 3/IR 

P P P 1 1 : 

: 

SMC -1103 

ii / : 


I! 3/IR 

p P p ; : \ 

: 

SMC- 11 31 

II / ! 


i i 7/7 

i 1 d i w 

NA NA NA 1 11 

1 

SMC -1207 

i» / 

II t i 


II 3/LR 

p p p : i : 

i 

1 

SNC-120B 

11 f 1 


1 : 3/IR 

p p p i i i 

I 

i 

GNC-1211 

II / I 


II ? ' 7 

It J / J 

NA NA NA 1 1 


GNC-1212 

II / ! 


i i *7 

II vi U 

HA NA NA 1 1 I 

■ 

SMC- 1213 

1 ; / 1 


1 1 / 

i i i 

1 

SMC- 1214 

ii / i 

it >■ i 


1 1 f 

i : i 

i i i 

1 

GNC-1 301 

II / 1 


li 3/IR 

P P P I I 

! 

GNC-1 302 

li / i 


1 ! 3/IR 

p p p i : i 

i 

SNC-i 305 

IS / ! 


il 3/IR 

p p p : i i 

i 

BMC- 1311 

II / ! 


II 3/3 

NA NA NA 1 1 I 

i 

GNC-1901 

it / i 

it i' i 


! i 3/IR 

P P P ; : 

i 

SMC -1902 

■ > t 

1 1 / 


ii 3/IR 

P P P ; ! 5 

i 

GNC-303 

1 ! / ! 


1 ! 3/IR 

p P P { : } 

i 

GNC-404 

i i ; 


! I / 

! ‘ i 


SMC -405 

I ! 


i > / 

I ■: * 

1 ! : 

3 

i 

BMC -602 

;; / 


II 3/IR 

p p p ! i : 

• 

GNC-610 

1 ! i* 


! 1 T / 7 

1 i ->/ J 

i t 

NA NA NA : : ; 
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IDEM! IF EERS i 

NASA 


IDA RECGNSIENEATIDNS i 


NASA ! IDA ! 

CRIT ' SCREENS 

! CRIT 

SCREENS 1 OTHER 

ISSUE ! 

r 

FMEA NUMBER : ASSESSMENT NUMBER : 

: HS/F i ft B c 

! \ m/F 

1 A E C 1 (SEE LEGEND CODE) 

HONE J SNC-702 j] 

II 

II 

II 

- - II 
(1 
II 
It 

-- II 
II 

n 

ii 

ii 

ii 

ii 

it 

ii 

ti 

ii 

1 1 

J] 3/1R 

: f p p i 


! GNC-710 I ! 

/ J 

! 3/3 

NA NA NA ( s 

J 


F-6 





